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A Work in Progress 


Hewlett-Packard’s 


acquisition of Compaq 


Computer one year 

ago next week has 

pleased some users 
and angered others. High-end system 
operators say the merger has yielded 
awelcome focus on critical systems. 
But users of midrange and low-end 


equipment say they're feeling ignored. 


Patrick Thibodeau reports on PAGE 6 


More Online 
HP has bolstered its services 
business, but it’s still no IBM. 
QuickLink 38022 
www.computerworld.com 


Bank’s IT Workers Threaten 
Strike Over Outsourcing Deal 


| plans were disclosed earlier 


Union seeks role in 
Bank of Ireland’s 
negotiations with HP 


BY THOMAS HOFFMAN 
Unionized members of the 
Bank of Ireland’s IT depart- 
ment are threatening to go on 
strike if they aren’t involved in 
final negotiations with Hew- 
lett-Packard Co. on a proposed 
outsourcing deal. 

Officials from Dublin-based 
Bank of Ireland and the union 
that represents its IT workers 
met last Tuesday for their first 
talks since the outsourcing 


| top, midrange and mainframe 
| systems as part of the deal, 


, a a 
| $600 million over seven years. 


| woulda 
| fer to HP of about 500 work- 


New Health Data Net May 
Help in Fight Against SARS 


Consortium plans trial of national network that 
could alert officials to epidemics, bioattacks 


How would you 
characterize your 


overall experience 
with HP since 


the merger? 


Tes) 


| BY BOB BREWIN 
A consortium of public health 
agencies and health care com- 

| panies in June plans to launch 
a three-month test of a data 
collection and distribution 

| network that’s designed to act 


as an automated early-warning | 
| by eHealth in the wake of the 
| Sept. ll terrorist attacks. But 


system in the event of epi- 
| demics like the global spread 
of the SARS virus. 

The Web-based network 
could also alert health care 
officials to possible bioterror- 
ist attacks, said Janet Marchi- 
broda, CEO of the eHealth 

| Initiative Inc. consortium. 
Marchibroda confirmed the 
basic details of the trial run 


this month. HP would take 
over management of the 
bank’s networks and its desk- 
which is expected to be worth 


The planned agreement 
Iso include the trans- 


ers from the bank’s IT arm, 


| where roughly one-third of 


the employees are members 
of the Irish Bank Officials’ 


| Association. 


On April 16, two days after 
Strike Threat, page 59 
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Exporting 


that’s being planned by the 


| Washington-based group, 
| which has about 115 members, 


including major vendors of 
health care IT systems. 

Some cities, including New 
York, developed local systems 
similar to the one envisioned 


the U.S. lacks a cohesive and 
standards-based network that 


| can be used nationwide, ac- 
| cording to Marchibroda. 


She said nine hospitals 


| across the U.S. plan to take 
| part in the test of eHealth’s 
| proposed National Healthcare 
| Collaborative Network, 


along 


The National He 
Collaborati 
pilot tes 


althcare 


= Use standards-based sys- 
CUR OM UC Eg ae Mc) 
data and transmit information 
PO mae ue oe 


= Support electronic data ex- 
change standards mandated by 
PUR Cr ema 


Meum mir lO) 
for patient symptoms that could 
be signs of epidemics like SARS 
Ce Loe 


with local, state and federal 
health agencies that she de- 
clined to identify. Marchibro- 
da also wouldn’t name the IT 
vendors that will participate, 
or comment about the tech- 
Health Net, page 59 


Ty 


JOBS 


IN AN UNRELENTING PUSH to low- 
er costs, more companies are tapping 
cheaper offshore labor to handle rou- 
tine IT tasks such as application main- 
tenance, new software development 
and even infrastructure support. The 
net result: fewer and fewer IT jobs for 
U.S. workers, whose livelihoods are in 
serious jeopardy. 
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You're being asked to do more. You're NES asked to do it with less. Microsoft” Windows® Server 2003 is designed 
to help you manage these pe SRS ate and deliver powerful software solutions with less time, money, and ee { 
hassle. For more information, and to get your free evaluation copy of Windows Server 2003 by July 31, 2003, go to : 
microsoft.com/windowsserver2003 Software for the Agile Business. 


> The London Stock Exchange, with the help of Accenture, selected Windows Server 2003 as the foundation for their real-time, } 

business-critical, market information delivery system. Using Visual Studio” .NET and the Microsoft .NET Framework, this 
innovative new system was developed in less than eight months from conception to production and now serves 100,000 

terminals worldwide with up to 3,000 transactions per second. i 
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Micro: 


Your business 
Your needs. 


Your choice. 


It’s high time someone in the software industry started listening to your needs. And standing up for your rights. Like the right to have 
month-to-month licensing. And the right to no upfront payments. That’s why we offer FlexSelect Licensing” to all our customers. This 
revolutionary approach to licensing is based on doing business on your terms, not ours. So you can have just the software you need, 
just when you need it. Check it out today. And find out how FlexSelect Licensing is raising more than just eyebrows in the software 


industry. It’s raising standards. ca.com/flexselect 


Introducing FlexSelect Licensing” Computer Associates® 


© 2003 Computer Associates Intemational, Inc. (CA). All rights reserved. 
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E-Business So Far 
In the Management section: In 


their new book on e-business, two 
authors from the Wharton School 
analyze why some Internet ventures 
were profitable while others failed. 


- Page 46 





- TECHNOLOGY 


In the Technology section: Some users couldn't wait for 
Microsoft’s long-delayed Windows Server 2003. Four orga- 
nizations say they’ve already realized benefits from migrat- 
ing to the new operating system, but they also expended 
many months of effort to make sure they did. Page 25 


OPINION 





On the first anniversary 

of the HP/Compaq merger, 
users weigh in on the com- 
pany’s performance. PAGE 6 


Intel promises 64-bit Itanium 
chips that will boost 32-bit 
application performance. 


IBM is shipping the upgraded 
WebSphere application server 
for z/OS and introducing a 

mainframe-style pricing model. 


Networld+Interop opens this 
week, amid optimism that’s 
surprising, given that there 
will be half as many exhibitors 
as there were last year. 


Microsoft pits SQL Server 
2000 Enterprise Edition 
against Unix-based systems. 


The Homeland Security De- 
partment’s leadership change 
raises questions about its 
effectiveness in the area of 
cybersecurity. 


iO Regulations like HIPAA create 


a dangerous gap between legal 
requirements and the techni- 
cal means of compliance. 


More companies are using 
disk arrays for secondary 
storage, a recent study found. 


Business Objects’ upgraded 
data analysis tool includes 
interface changes and tighter 
integration capabilities. 


Microsoft’s server VP talks 
about the competition await- 
ing Windows Server 2003. 


28 VPNs Made Easy. With SSL 
virtual private networks, ac- 
cessing Web-enabled applica- 
tions is as easy as launching a 
browser, but you'll still need 
client software for other ap- 
plications. 


30 QuickStudy: Blogs. This 
week’s tutorial looks at web- 
logs — Web sites where peo- 
ple record their opinions and 
comments from others, with 
links to other Web resources. 


32 Security Manager’s Journal: 
Merger Security Hinges on 
Gateway Appliance. An inte- 
grated security gateway appli- 
ance provides interim access 
between Mathias Thurman's 
firm and an acquisition with- 
out compromising security. 
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39 Exporting IT Jobs. Yours 
could very well be the 
next one to go offshore. 





42 There’s More to Consider 
Than Cheaper Labor. 
You should examine all 
the risks of outsourcing 
overseas, experts warn. 


44 Steal This Idea: And the Win- 
ner ls... Southern California 
Edison rewards IT excellence 
beyond the walls of its IT de- 
partment. 


50 Follow-up: Tyson Integrates 
IT, Cuts Costs After Merger. 
Tyson Foods has finished one 
phase of its massive IT proj- 
ect after acquiring IBP. 





20 Patricia Keefe discusses the 
current sea change in the IT 
industry and suggests issues 
to focus on while gearing up 
for the next evolution of IT. 


20 Pimm Fox says that Web ser- 


vices will finally give IT some 


security and provisioning ca- 
pabilities, now that the Ser- 
vice Provisioning Markup 


Language has arrived. And it’s 


about time. 


Thornton May urges IT lead- 
ers to push ahead with proj- 
ects that solve companies’ 
desperate need for real-time 
demand- and portfolio-man- 
agement technologies. 


34 Robert L. Mitchell predicts 
that technology convergence 
is likely to force IT staffers 
into unexpected new roles. 


48 Peer to Peers: Donald Finley 
writes that IT professionals 
are watching job opportuni- 
ties fade away, as companies 
like Microsoft and GE set up 
IT shops overseas and the 
economy remains slow. 


60 Frankly Speaking: Frank 


Hayes gives a refresher course 


in how to screw up and even 


offers a cheat sheet of 13 ideas 


— in case you’ve forgotten 
how. 
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Control Your Company's 

Mobile Devices 

How do you get and keep control of the 
plethora of mobile devices pervading your 
company? Joan Herbig, CEO of XcelleNet, 
has a few ideas. @ QuickLink 37959 


What Do You Think 
About the Future of IT? 


Read Patricia Keefe’s editorial on page 20, 
and then head to our online forum to share 
your opinions and read what others have 
to say. @ QuickLink a3070 


An Introduction to Arrays 


DEVELOPMENT: Get an overview on how to 
use arrays in PHP. @ QuickLink 37936 


Hands On: Apple Remote Desktop 


MAC: A new version of Apple Remote Desk- 
top is out, and Hunter College’s Yuval 
Kossovsky offers a hands-on view of what 
the application has to offer enterprise users. 
@ QuickLink 23080 


What’s BGP Got to Do 
With Internet security? 


SECURITY: Columnist Marcia J. Wilson takes 
a close look at the risks of the Border Gate- 
way Protocol and what can be done to secure 
this critical Internet protocol. 


@ QuickLink 37750 


Weblogs 


See editors’ picks of interesting content from 


around the Web. @ QuickLink a3090 
ONLINE 
DEPARTMENTS 


Breaking News 
© QuickLink a1510 


Newsletter Subscriptions 
@ QuickLink ai430 
Knowledge Centers 

@ QuickLink a2570 
The Online Store 

@ QuickLink a2420 


What's a QuickLink? 
On some pages in 
this issue, you'll see 

a QuickLink code pointing 

to additional, related con- 

tent on our Web site. Just 
enter that code into our 
you'll see at the top of 
each page on our site. 
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Microsoft Extends 
Office 2003 Beta 


Microsoft Corp. said that after 
getting feedback from early users, 
it plans to release a “refresh” of 
the beta-test version of its Office 
2003 software before starting 
commercial shipments. That will 
delay the scheduled launch of the 
desktop applications upgrade 
from June to sometime in the 
third quarter. A Microsoft official 
said the company is addressing 
“some minor issues that can im- 
pact customer satisfaction.” 


Security Hole Found 
To Affect NT 4.0 


Microsoft also said that systems 
running Windows NT 4.0 are vul- 
nerable to a software flaw used to 
attack Windows 2000 servers in 
March. When it first warned of the 
problem, Microsoft said only Win- 
dows 2000 was affected [Quick- 
Link 37224]. But the flaw is in a 
core component in both operating 
systems, it said last week. 


Cisco Warns of 
Flaw in Software 


Cisco Systems Inc. warned of a 
buffer overrun flaw in the Win- 
dows version of its Secure Access 
Control Server software, which | 
manages access to the company’s 
routers, switches and other de- 
vices. The vulnerability could be 
used to launch denial-of-service 
attacks or gain system adminis- 
trator access to devices, Cisco 
said. Patches are available on 
Cisco’s Web site. 


Lucent CEO Will 
Manage Operations 


Lucent Technologies Inc. in Mur- 
ray Hill, N.J., announced that 
Chairman and CEO Patricia Russo | 
will take over day-to-day manage- 
ment duties from Bob Holder, whe 
will step down as chief operating 
officer this summer. Russo said 
she “decided that it was the right 
time to consolidate our top man- 
agement structure.” 





NEWS 


Intel Moves to Boost 


Itanium’s 32-bit Power 


Develops new software to work with 
the next version of its 64-bit processor 


BY TODD R. WEISS 
NTEL CorRP. last week said 
the next version of its 64- 
bit Itanium 2 chip will 
come with new software 
designed to improve the per- 
formance of 32-bit applications 
running on Itanium 2 systems. 
The new chip, code-named 
Madison, is scheduled to ship 


| in the second half of the year, 


said Intel spokesman Scott 
McLaughlin. He added that 
the IA-32 software execution 
layer will give 32-bit applica- 


| tions running on Itanium 2- 


based servers performance on 


| par with that of systems built 


around the 1.5-GHz version of 
Intel’s Xeon MP processor. 
Pieces of the software will be 


| installed on the chip itself and 
| as part of operating systems. 


The disclosure of Intel’s 





software plans coincided with 
chip rival Advanced Micro De- 
vices Inc.’s announcement of 
its 64-bit Opteron server proc- 
essor, which also was de- 
signed to run 32-bit applica- 
tions at speeds comparable to 
their performance on existing 
systems [QuickLink 37872]. 

McLaughlin said the IA-32 
technology is part of a “natur- 
al evolution of 32-bit support 
on Itanium.” The software ex- 
ecution layer has been under 
development for several years 
and is currently undergoing 
validation testing, he said. 

But McLaughlin acknowl- 
edged that Intel has heard 
complaints about 32-bit appli- 
cation performance on Itani- 
um-based systems. 

Although Intel officials ac- 
knowledge that the Itanium 


IBM to Ship WebSphere 5.0 


| Pricing will switch 


to mainframe’s 
value-unit model 


| BY CAROL SLIWA 


IBM this week will ship a new 


| version of its WebSphere ap- 
| plication server for the z/OS 


operating system and intro- 
duce a new pricing model for 
the product. 

The prior version of Web- 
Sphere for z/OS had been 


| priced at a fixed $35,000 per 


processor. The new edition 
will adopt the value-unit pric- 
ing model that’s familiar to 
IBM’s mainframe customers, 
said David Chew, director of 
WebSphere enterprise trans- 
action systems. 

“We changed for the zSeries 
because these processors tend 
to be rather big and powerful, 





For z/OS, Alter License Plan 


and customers are used to a 
pricing model that is more 
akin with their hardware 


structure,” Chew said. 
| 


Value units are calculated 


| . 
based on the processing per- 


formance of the zSeries hard- 
ware. The capacity of the 
mainframe is measured in mil- 
lions of service units. 

Customers purchase licens- 
es based on the number of 
processors they actually use, 
but those with older zSeries 
models pay less per processor, 
since their machines perform 
at lower levels than the newer 
models. WebSphere has a tool 
that’s designed to help cus- 
tomers determine how many 
value units they need based on 
their hardware. 

Marcy Nechemias, IBM’s 
marketing manager of Web- 
Sphere for z/OS, said existing 





Intel’s 32-bit 
Upgrade Plan for 
Itanium 2 


= New execution software de- 
signed to speed up 32-bit appli- 
cations will be offered with the 
next version of the processor, 
which is due later this year. 


@ The software will provide per- 
formance equivalent to what 
users can get on existing systems 
equipped with Intel's 1.5-GHz 
Xeon MP chips. 


processors already include 
built-in support for running 
32-bit applications, real-world 
performance levels have been 
less than awe-inspiring, said 
Rich Partridge, an analyst at 
D.H. Brown Associates Inc. in 
Port Chester, N-Y. 

By announcing the software 
plans, Intel is moving “to ad- 
dress what is perceived to be a 


users of WebSphere for z/OS 
will see no change in cost. 
Their inventory will simply 
show the correct number of 
value units instead of “en- 
gines,” or processors. 

“It’s just a conversion from 
one metric to another,” said 
Nechemias. 

New customers who buy 
WebSphere for z/OS for fewer 
than three engines and notice 
that the old per-processor 
pricing model might have 
worked out to be cheaper will 
find an entry-level option to 
get started at a lower cost, ac- 
cording to Nechemias. 

“We want to see WebSphere 
become a pervasive product 


The entry-level option applies to 
customers buying 2! ) 
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Cl to Temi Umm eeu Soe 





www.computerworld.com 


problem,” Partridge said. “The 
perception is that the current 
hardware [support] for 32-bit 
applications on Itanium 2 
doesn’t give full performance.” 

That has opened up a poten- 
tial marketing opportunity for 
Sunnyvale, Calif.-based AMD. 
IBM last week said it plans to 
ship Opteron-based systems 
later this year, and AMD’s new 
chip also drew promises of op- 
erating system support from 
Microsoft Corp., Red Hat Inc. 
and SuSE Linux AG. 

Charles King, an analyst at 
The Sageza Group Inc. in 
Mountain View, Calif., said he 
thinks Intel will be seen as try- 
ing to play catch-up with AMD 
on 32-bit application support 
in the wake of the Opteron 
launch. “That probably woke 
them up a little bit,” King said. 

Most users have been telling 
Intel officials that they plan to 
move to 64-bit applications 
when they install Itanium- 
based systems, McLaughlin 


| said. But a major reason for in- 


corporating the new software 
layer is to let companies con- 
tinue to use 32-bit applications 
that haven’t yet been ported to 
64-bit systems, he added. D 


on the mainframe platform,” 
Nechemias said. She added 
that IBM is trying to ensure 
that customers will see a low- 
er cost for incremental growth 
once they start using Web- 
Sphere for z/OS. 


Java Support 
WebSphere 5.0 is certified for 
Java 2 Enterprise Edition 
(J2EE) 1.3 technologies and 
also supports more than half 
the J2EE 1.4 technologies that 
are due to be finalized later 
this year, according to IBM. 
The version for z/OS is de- 
signed to take advantage of 
many zSeries capabilities, in- 
cluding its high reliability, 
scalability and security. 
Stephen O'Grady, an analyst 
at RedMonk in Hollis, N.H., 
said that IBM has worked hard 
to reduce the differences be- 
tween versions of WebSphere 
and that the job of porting ap- 
plications from smaller boxes 
to the mainframe should be 
easier with WebSphere 5.0. D 
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NEWS 


Networld+Interop Optimism 
Prevails Despite Downturn 


Vendor count half that of last year’s show | 





BY MATT HAMBLEN 
NetWorld+Interop opens this 
week in Las Vegas amid an 
optimism that belies the de- 
pressed state of the economy, 
ongoing travel concerns and 
the fact that there are fewer 
than half as many exhibitors 
this year as there were at last 
spring’s event. 

The mood is especially up- 
beat compared with last fall’s 
N+I in Atlanta. Organizer 
Key3Media Events Inc. board- 
ed up that show for good after 
key vendors failed to partici- 
pate. Two networking shows 
per year was one too many, 
said Mike Millikin, senior vice 
president of los Angeles- 
based Key3Media. 

Users said they hope to gain 
some insights into new tech- 
nologies this week so they will 
be ready to go when the econ- 
omy improves. 


Corrections 

In our April 21 story “Tight IT 
Budgets Put Crimp in SAN 
Plans,” information about IT lay- 
offs at Telus Communications 
Inc. and about the size of the 
company's data storage relative 
to networked storage was incor- 
rectly attributed. The information 
should have been attributed to 
David Chamberlain, vice presi- 
dent of architecture at Providian 
Financial Corp. 


In our April 21 story “The Best of 
Both Shores,” the name of All- 
state Insurance Corp.'s assistant 
vice president for finance was 
misspelled. The correct spelling 
is Mike Scardina. 


Our April 21 feature “802.1ig 
Speeds Ahead of Needs,” con- 
tains a typographical error. In the 
sentence “To support both lla 
and Tig client types, corpora- 
tions must buy more expensive, 
dual-mode access points,” Tig 
should read Tib. 





“T feel pretty optimistic 


about the future of technology, 


and in two years, you'll see 
some extraordinary things, es- 
pecially with wireless,” said 
Michael Krone, network man- 
ager at The United Center, a 
sports and enter- 
tainment venue in 
Chicago. 

Krone said he 


most affordable and effective 
path to IP convergence. 
Rick Sloan, telecommunica- 


tions manager at Dollar Tree 
| Stores Inc., a chain of 2,300 re- 
| tail outlets based in Chesa- 


ATTHESHOW 


Go online for highlights of key 


peake, Va., said he plans to hit 
seminars and the show floor 
to expand his knowledge be- 


munications tech- 
nologies. Sloan 
said Dollar Tree is 


announcements planned for 


plans to research 
voice-over-IP and 
wireless products, 
“right there with 
the vendors in front of my 
face.” As a major user of prod- 
ucts from Foundry Networks 
Inc. in San Jose, Krone said he 
wants to compare Foundry’s 
technology with that of Ex- 
treme Networks Inc. in Santa 
Clara, Calif., among others, to 
see which products offer the 


this week's Nel 


@ QuickLink 38014 
www.computerworld.com 


a satisfied user of 
gear from Avaya 
Inc. in Basking 
Ridge, N.J., and 


Cisco Systems Inc. But he said 
| he doesn’t want to become 


“complacent” with his ven- 


| dors. Dollar Tree’s culture is 
| “pretty mean and lean,” with 
| an emphasis on cost savings, 
| he said. “We sell everything 


for a dollar, so there’s not a lot 


| of fluff” in the company’s IT 


yond pure telecom- | 


infrastructure, Sloan said. 

This week’s show is on track 
to draw 40,000 people, match- 
ing the attendance at last 


| year’s N+I show in Las Vegas, 


Millikin said. But there will be 


| only 260 vendors on the show 


floor, down from 572 in 2002, 


| show officials said. 


| 





MCI, formerly WorldCom, 
may have the most ambitious 
agenda among the vendors, as 


it tries to demonstrate a resur- | 


gence following its Chapter ll 
bankruptcy filing. N+I is 
“timed perfectly” with MCI’s 


completion of its 100-day reor- | 


ganization plan and rebrand- 
ing effort, said Ron McMur- 
trie, MCI’s vice president of 


| global branding. MCI will un- | 
veil a road map for building IP | 
and convergence services with | 
| the announcement of a secure 


internetworking gateway, said 
McMuttrie. 


Officials of several large net- | 


working vendors said N+I is 
still the most important show 
they attend each year in North 
America. “N+I is extremely 
important for us ... and we 


have been more selective with | 


Microsoft Releases 64-bit SQL Database 


Enterprise Edition 
touted as Unix 
alternative 


BY MARC L. SONGINI 

Microsoft Corp. has released 
a 64-bit database and claims 
that the new system features 
performance rivaling that of 
Unix-based systems yet offers 
greater ease of use at a 

iower cost. 

In conjunction with the 
launch of Windows Server 
2003, Microsoft last week an- 
nounced that it’s shipping the 
64-bit SQL Server 2000 Enter- 
prise Edition. With the move, 
Microsoft follows in the foot- 


steps of Oracle Corp. and IBM, 


which have offered 64-bit ver- 
sions of their databases for 
Unix and mainframe systems 
for years. 

Oracle, meanwhile, an- 
nounced the availability of a 
version of Oracle9i Database 
Release 2 that’s optimized for 





64-bit Windows Server 2003. 

Microsoft’s 64-bit version of 
its SQL Server database gives 
high-end database users an al- 
ternative to Unix, said Sheryl 
Tullis, Microsoft’s product 
manager for SQL Server. “For 
customers that need high- 
powered computing, this 
makes it attainable without 
the upfront maintenance and 
management costs of Unix 
systems,” she said. 

Tests indicate that the data- 
base will have 512GB of ad- 
dressable memory, double 


Peer reer eeresesessesesereseseee 


It’s the same 

as ever with 
64-bit. It’s a tech- 
nology in search of 
a mass-market 
application. 


Cee ereceeecesesesessseesesseees 


JAMES GOVERNOR, 
ANALYST, REDMONK 


| 


what was available under 32- 
bit SQL Server. 

Forest Hills, N.Y.-based air- 
line JetBlue Airways Corp. in 


bit SQL Server database that 
supports the company’s fre- 


| quent-flier application, said 
| CIO Jeff Cohen. JetBlue is 


| based data ware- 


Cohen said. 


| rently running 32- 


building a 64-bit SQL Server- 


house to run cus- 
tomer analytics, 


The airline is cur- 


| bit SQL Server to 
| support internal business ap- 


| base for special aviation appli- | 
| is a ‘nice to have, not a ‘need 


plications and an Oracle data- 


| cations. Cohen said that when 


using the 32-bit SQL Server 
for the frequent-flier applica- 
tion, JetBlue had to keep 


adding more servers and proc- 


essors to maintain perfor- 

mance. With a 64-bit architec- 
ture, the company was able to 
shrink a three-server Compaq 


MORE THIS ISSUE 


Microsoft's Bill Veghte 
discusses the competition 
faced by Windows Server 
2003. Page 16 
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“Projected 


going to shows recently,” said 
Duncan Potter, vice president 
of marketing at Extreme Net- 
works. The company is pro- 
viding what Potter called the 
“world’s largest temporary 
LAN” to serve as the show’s 
networking infrastructure. B 


ProLiant system with 12 proc- 


| essors to one four-way 


Hewlett-Packard Co. server. 
“We were very thrilled by 

performance,” said Cohen, 

who added that 64-bit SQL re- 


| quires only 10% to 20% CPU 
December went live with a 64- | 


utilization, as opposed to as 


| much as 60% with 32-bit SQL. 


But aside from the very few 
organizations that have a need 


| for “serious number crunch- 


ing,” there will be a limited de- 
mand for 64-bit 
SQL Server, said 
James Governor, an 
analyst at Red- 
Monk, a consulting 
firm in Hollis, N.H. 
“Tt’s the same as 
ever with 64-bit. It’s a technol- 
ogy in search of a mass-mar- 
ket application. Sixty-four bit 


to have’ in many cases.” 


According to Tullis, Micro- 
soft has commitments from 
business software vendors 
Siebel Systems Inc., People- 


| Soft Inc. and SAP AG to opti- 


mize their software for the 
64-bit version of SQL Server. D 
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Postmerger HP’s Rating 
Differs by Size of User _ 


One year later, 
HP’s union with 
~~" draws 
raves, criticism 


BY PATRICK THIBODEAU 
One year after Hewlett- 
Packard Co.’s acquisition of 
Compaq Computer Corp., user 
opinion about the impact and 
benefits of the merger is de- 
cidedly mixed. 

High-end users, such as 
Steven Barker, systems admin- 
istrator for the automated teller 
machine system at Huntington 
National Bank in Columbus, 
Ohio, said he has seen a big im- 
provement in support for the 
NonStop fault-tolerant com- 
puter line, which Compaq ac- 
quired in 1997 when it bought 
Tandem Computers Inc. 

Refore the merger, Compaq 
would send representatives 
“who couldn’t even spell Tan- 
dem,” he said. “Now it seems 
like they concentrate on us a 
little bit more.” 

But at Valley Presbyterian 
Hospital in Van Nuys, Calif., 
it’s a much different story. HP 








“made a lot of changes with- 


| out talking to customers, and 
| they used to be really good 


about talking to their cus- 
tomers,” said senior program- 
mer analyst Catherine Litten, 
who’s in charge of the hospi- 
tal’s HP 3000 minicomputer, 
which is being phased out. 
The merger meant the end 


of HP’s Vectra desktop line, on 


which the hospital had stan- 


dardized. That move, on top of 


a premerger decision to end 
HP 3000 support in 2006, has 
Litten roiled. “How many 
things are we going to have to 


| replace here?” she said, noting 


that it will cost the hospital 
about $1 million to replace the 
HP 3000. 


| Strategy Still Sketchy 


HP’s enterprise strategy is a 


| work in progress. Immediately 
| following the merger, the com- 


pany released road maps for 


| key products. But questions 
| persist, and the company 


doesn’t seem to be doing a 
uniform job in reaching users. 
Users with clout are getting 


| answers. For example, Andi 


Coleman, the Tandem security 


HP Plots Itanium Course 


Part of HP’s postmerger strategy 


includes moving all of its high- 
end systems to Intel's Itanium 
chip. It will be a lengthy process. 
Only 3,000 Itanium servers 
were shipped worldwide in the 
fourth quarter last year, according 
to IDC in Framingham, Mass. 
That's out of roughly 1 million 


servers shipped during the period. 


But HP's product strategy is 
gaining steam. Last week, the 
company announced bench- 
marks by the Transaction Perfor- 
mance Processing Council 
(TPPC), an independent, non- 
profit testing group in San Jose, 


for its planned Superdome server. 


The server will run the upgraded 


ttanium 2 processor, code-named 
Madison, with a 64-bit version of 
Windows Terminal Server. 

Rich Partridge, an analyst at 
D.H. Brown Associates Inc. in 
Port Chester, N.Y., said new 
products typically ship within six 
months of the benchmark re- 
lease to comply with TPPC rules. 

HP this month also announced 
a sale of 1,000 Itanium 2 chips to 
BP PLC to build a clustered sys- 
tem running Linux in BP’s seis- 
mic research facility in Houston. 

Technical computing opera- 
tions are typical early adopters 
of new chips. Keith Gray, man- 
ager of BP’s high-performance 
computing center, said the com- 





team leader at Charlotte, N.C 
based Bank of America Corp., 

said HP is paying attention to 
her because of the size of her 
company and her role as mod- 
erator of the special interest 
group on security for the 
ITUG HP NonStop user group. 

NonStop users have gotten 
HP to agree to security im- 
provements, said Coleman, 
and she’s optimistic that HP 
will give more attention to the 
line. “I think that Compaq 
kind of left it sitting over there 
in the corner,” she said. 

Although Coleman has met 
with top HP officials, no one 
has come knocking on Robert 
Rothenberger’s door. Rothen- 
berger, director of data center 
operations at Keystone Mercy 
Health Plan in Philadelphia 
and chairman of a regional 
group of the AFCOM data 
center association, said he has 
yet to hear from HP following 
the merger. “I would have 


| thought that they’d have made 


an effort to pull together 
something and come to their 
good customers,” he said. HP 
is planning to detail its enter- 
prise strategy on May 6, and 


pany is in a “risk-based busi- 
ness,” and it believes having 
better seismic imaging can help 
control costs while improving its 
ability to find and extract oil. 

Mark Melenovsky, an IDC an- 
alyst, said Itanium chip sales in 
technical and other niche mar- 
kets could spur interest in com- 
mercial application development 
for the new chip. “That's how a 
new platform or new operating 
system gets started,” he said. 

But not all early Itanium 
adopters are technical users. 
Fortis Inc., a Milwaukee-based 
insurance provider, has begun 
using a version of Unisys Corp.'s 
ES7000, a 32-way server that 
can integrate 64-bit Itaniums 
and the 32-bit Xeon. 

Roger Jones, senior vice 
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adnaheind said he hopes it 
shows “a commitment to a 


| unified strategy, where I can 


be convinced that service and 
support will be dedicated to 
that strategy.” 

HP is continuing to support 
the OpenVMS operating sys- 
tem, which Compaq acquired 
through its purchase of Digital 
Equipment Corp. in 1998. 
Some users had been con- 
cerned about HP’s support 
plan for OpenVMS running on 
VAX and Alpha processor sys- 
tems, since the company is 
moving all of its high-end 
servers, including NonStop, to 
Intel Corp.’s 64-bit Itanium 
chips. But HP appears to have 
ameliorated those concerns. 

Arthur McCliuton, a princi- 
pal scientist at Mitretek Sys- 





tems Inc., a Falls Church, Va., 


president and CIO at Fortis, said 
he went with the scalable system 
rather than a clustered approach 
because he believed the cost 
would be lower. “The more ma- 
chines you have, the more you 
have to maintain,” he said. He’s 
using the system for memory-in- 
tensive services, such as file and 
print, and for terminal services. 
Jones said the industry is ina 
chicken-or-egg situation with 
Itanium, where software vendors 
are reluctant to write code for 
the 64-bit systems without a de- 
mand for it, and users aren't de- 
manding the systems because 
there are no applications. But 
Jones maintains that the core 
systems are in place and that 
64-bit processing is inevitable. 
~ Patrick Thibodeau 
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In what product/services area 
has the merger yielded the most . 


Note: Percentages may not add up to 100% due to rounding. 


company that runs U.S. weath- 
er satellites, said HP recommit- 
ted to Compaq’s support road 
map for VAX and Alpha and 
will continue to maintain the 
system until 2012. That’s “what 
I was after,” he said. 

But while OpenVMS will 
survive, the merger is spelling 
the end of Compaq’s Tru64 
Unix running on Alpha. HP is 
planning two more releases of 
Tru64, one later this year and 
one next year, and will contin- 
ue support until 2011. Cus- 
tomers will get a “very long 
runway” to consider migration 
options, said Don Jenkins, 
HP's director of operating 
environments. 

HP is also integrating key 
aspects of Tru64 in its HP-UX 
Unix operating system, such as 
its TruCluster Server and Ad- 
vanced File System. But the de- 
cision is risky for HP because it 
will be as easy for Tru64 cus- 
tomers to move to other ven- 
dors’ systems as it will be to 
move to HP-UX, said Paul Mc- 
Guckin, an analyst at Gartner 
Inc. in Stamford, Conn. 

The merger has affected 
users in other ways as well. 
The uncertainty, along with 
HP’s announcements of lay- 
offs, prompted Dan Barth, CIO 
at The Oklahoma Publishing 
Co. in Oklahoma City, to begin 
purchasing servers from Dell 
Computer Corp. after buying 
Compaq systems for years. 
“We didn’t want to go through 
the change of the merger and 
find out what product lines 
were going to survive,” he said. 
Barth isn’t ruling out going 
with HP in the future. But “un- 
til we know better, let’s cau- 
tion ourselves,” he said. D 
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Introducing the AMD Opteron” processor, 64-bit computing for today’s 32-bit world. 
It’s the only processor that is designed to run your 32- and 64-bit applications simultaneously and without compromise. 
AMD Opteron runs on AMD64~—a breakthrough architecture that enables 64-bit technology on the x86 platform-— 


creating a new class of computing so you can migrate to 64-bit technology on your own terms. 


The world’s highest performing 2P and 4P servers are now powered AMDZ 
by AMD Opteron processors. Receive the performance and security benefits of Oo 
C pteron 


64-bit computing, while getting the best 32-bit performance available anywhere. 


Leverage your existing investments while preparing for the future. One architecture 


across one enterprise means you won't have to rip and replace your entire infrastructure when you transition 
to 64-bit computing. It’s just another way AMD designs and builds processors with you in mind. For a closer 


look at the financial and performance advantages of the AMD Opteron processor, visit www.amd.com/opteron 
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Pentagon Chooses 
EDS for IT Revamp 


Electronic Data Systems Corp. 
said it has won a contract, valued 
at $258 million over two years, 
to upgrade the Pentagon’s IT in- 
frastructure in an effort to ensure 
the technology can withstand a 
Sept. 11-like terrorist attack. The 
contract covers networks, voice 
and data messaging systems, 
and data storage devices at the 
Department of Defense, said 
Plano, Texas-based EDS. 


Microsoft Patches 
Browser Holes . . . 


Microsoft Corp. issued a soft- 
ware patch designed to plug four 
security holes in its Internet Ex- 
plorer Web browser. The com- 
pany gave three of the flaws a 
“critical” severity rating and said 
the most serious could be used 
te run malicious code on sys- 
tems. Microsoft also released a 
patch to fix a vulnerability in its 
Outlook Express e-mail software. 


... And Says It’s 
Revising Fix for XP 


In another security-related mat- 
ter, Microsoft said it’s revising a 
patch issued April 16 to address 
a buffer overrun flaw in the Win- 
dows kernel, after users coiii- 
plained that the fix can cause 
performance slowdowns on some 
PCs running Windows XP. But 
Microsoft left the original patch 
on its Web site and said it could 
still be used. Other versions of 
Windows aren’t affected. 


Short Takes 


LUCENT TECHNOLOGIES INC. in 
Murray Hill, N.J., reported a 
$553 million loss for its second 
quarter, which ended March 31. 
But Lucent said it still expects to 
become profitable from an oper- 
ating standpoint during its cur- 
rent fiscal year . .. EDGAR F. 
“TED” CODD, who in the late 
1960s invented the relational 
model of storing data, died April 
18 at the age of 79. 





Companies want 


| guidance on where 


responsibility lies 


BY DAN VERTON 


| WASHINGTON 


HE CHANGING of the 
cybersecurity guard 
at the Department of 
Homeland Security 
(DHS), coupled with com- 
placency on the part of some 


corporate executives, has put a 
| higher premium on informa- 


tion-sharing and cooperation 
between the private sector 
and the government. 

“The two words to focus 
on are cooperation and coor- 
dination,” said Richard David- 


| son, CEO of Omaha-based 
Union Pacific Corp., which 


combats more than 80,000 
probes on its networks daily. 
“That all adds up to partner- 
ship and information-sharing, 


| and that is our best form 


of protection during these 





NEWS 


Davidson, who also serves 
as chairman of the President’s 
National Infrastructure Advi- 
sory Commission. 

Davidson spoke last week at 
a U.S. Chamber of Commerce 
conference in Washington that 
addressed the roles and re- 
sponsibilities of the govern- 
ment and private sector in 


| homeland security efforts. 


| Security Slowdown 


Uncertainty stemming from 
the loss in recent months 


| of critical cybersecurity lead- 


ership at the DHS could esca- 
late into danger for private- 


| sector companies, said Michael 


Hershman, president and CEO 
of Decision Strategies LLC, an 
Oakton, Va.-based security 
consulting firm. 

Companies have started 
to slow down their efforts to 
boost security because there 
has been no terrorist activity 
recently, Hershman said. 





Public/Private Security 
Partnership Gets Rocky 


| challenging times,” said 


Corporations 

in America 
have spent billions 
of dollars for security, 
with very little cost- 
benefit analysis. 


MICHAEL HERSHMAN, PRESIDENT 
AND CEO, DECISION STRATEGIES LLC 


“I’m afraid that they may be 
drawing back into compla- 
cency,” he said. “In recent 
months, we’ve seen corpora- 
tions stand back, reassess 
what their needs are and try 
to understand what the level 
of threat is.” 

But a lack of effective com- 
munication between the cor- 
porate community and gov- 
ernment agencies has left 
companies trying to assess 
their risk with little or no 
understanding of the threat, 
Hershman said. 

“Corporations in America 
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have spent billions of dollars 
for security, with very little 


| cost-benefit analysis,” said 


Hershman. He noted that the 
Bush administration has only 
added to the confusion regard- 
ing who is ultimately respon- 
sible for critical infrastructure 
security by assigning respon- 
sibility to industry while issu- 
ing more than 60 regulations 
since Sept. ll, 2001. 

The lack of order and stabil- 


| ity in the way the government 


currently deals with the pri- 
vate sector — a situation exac- 
erbated by the recent creation 
of the DHS — is of immediate 
concern to Michehl Gent, 
president of the North Ameri- 
can Electric Reliability Coun- 
cil in Princeton, N_J. 

“We have a constant fight 
among agencies for the hearts 
and minds of industries,” said 
Gent, referring to the multi- 
tude of federal agencies that 
regularly bombard private- 
sector entities with requests 
for security information. 
“DHS is supposed to do that, 
and I’m looking forward to 
them being more successful. 
But in the meantime, I have 
to keep warding off [govern- 
ment agencies].” D 


Schmidt’s Departure From DHS Raises Cybersecurity Leadership Concerns 


WASHINGTON 

The private-sector IT security 
community will lose a staunch 
advocate in the White House on 
May 1 when Howard Schmidt 
leaves government service. 

Schmidt, heir apparent to 
the role of chief cybersecurity 
adviser to the secretary of home- 
land security, announced last 
week that he plans to retire 
after only 17 months as vice 
chairman of the President's Criti- 
cal Infrastructure Protection 
Board. Schmidt served alongside 
Richard Clarke, the nation’s first 
chief cybersecurity adviser, who 
retired in February. 

Matters of cybersecurity now 
fall to Robert Liscouski, a former 
executive at The Coca-Cola Co. 
who was recently named assis- 
tant secretary of infrastructure 
protection at the DHS. His re- 
sponsibilities include cybersecu- 


rity and protecting the nation’s 
vital physical assets from attack. 

The concern is that without a 
single individual responsible for 
private-sector cybersecurity, it 
could get lost in layers of DHS 
bureaucracy. 

Alan Paller, director of the 
SANS Institute, a security re- 
search firm in Bethesda, Md., 
said he was saddened by 
Schmidt's decision to leave. 
“He was the one rep- 
resentative from in- 
dustry that actually 
understood the way 
attacks are launched 
and what needed to be 
done to stop the at- 
tacks,” Paller said. 

David Wray, a DHS 
spokesman, said the 
department couldn't 
comment on what the 
White House may or 


eSB Roky 
CFVR elie) 
clear road map for a 
Peer Cem liege 


may not do about having a single 
individual in the DHS who is re- 
sponsible for cybersecurity. But 
he noted that many of the tech- 
nology industry's leading compa- 
nies have recognized the impor- 
tance of and adopted an integrat- 
ed approach to cyber and physi- 
cal infrastructure security. 

Schmidt downplayed the 
impact that his retirement will 
have on the government's ability 
to work with the pri- 
vate sector. 

“We have to under- 
stand that this [issue] 
is more than just a 
person,” Schmidt 
said. “Irrespective 
of where it is in the 
administration and 
where it is executed 
now, we have a clear 
road map and people 
who are empowered 


to make [the strategy] work.” 

Still, Harris Miller, president of 
the Arlington, Va.-based Informa- 
tion Technology Association of 
America, said not appointing a 
prominent individual to a position 
that is solely responsible for cy- 
bersecurity is unfortunate. “Not 
having someone like Howard or 
Dick Clarke as a special adviser 
to the secretary is a big error, in 
my estimation,” said Miller. 

“We're experiencing the loss 
of two real experts that [private] 
industry and the country depend- 
ed on,” said Larry Wortzel, an an- 
alyst at conservative think tank 
The Heritage Foundation and a 
career military intelligence offi- 
cer. “I hear dissatisfaction with 
the model” of making one indi- 
vidual responsible for both cyber- 
security and physical infrastruc- 
ture protection, he said. 

~ Dan Verton 





REAL-TIME BUSINESS ISN’T 
JUST ABOUT GETTING 
INFORMATION FASTER. 


IT’S ABOUT MAKING SURE 
YOUR BUSINESS CAN 
TAKE ADVANTAGE OF IT. 


In a true. real-time business, everything moves 

faster. Your data is always where and when it’s 
needed. You coordinate activities and automate 
processes end to end. You enjoy greater visibility 
and understanding. And you have the ability to 


drive your business with new immediacy. 


TIBCO Software's proven integration solutions 
enable real-time business. By unifying and 
optimizing your existing assets—people, 
processes and legacy systems—you can do 
more with what you already have. And do it 
better. it’s what we call The Power of Now.” 
Our unbiased, independent approach and 
easily-deployed integration solutions can 
help you grow your business even in today’s 


difficult environment. 


As the world's leading independent integration software provider, oan = — adorn cm — ee 


TIBCO has helped more than 2,000 companies take advantage of Delta Air Lines partnered with TIBCO to create the 


real-time business. Discover how you can put The Power of Now to :' Delta Nervous System, which connects Delta’s 13 busi- 
: ness units and 30 databases, and handles more than 5 
million daily business events. 


work. Call 888-558-4226 or visit us at www.tibco.com/cwc 


“The ability to share information with our employees 


es and customers in real-time, and to automate how we 
share it, has allowed us to transform our business, 
improve customer service, and reduce costs.” 


T h e P ower of N ow —Curtis Robb, Delta Air Lines CIO, 


Delta Technology CEO 
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Data Security Measures Failing 
‘To Match Legal Expectations 


Regulations raise stakes for compliance 





BY JAIKUMAR VIJAYAN 
MERGING LEGAL ex- 
pectations for data se- 
curity and privacy are 
making it increasingly 

important for companies to 

demonstrate reasonable care 

in protecting their IT assets, 

say security and legal experts. 
Regulations such as the 

Heaith Insurance Portability 

and Accountability Act 

(HIPAA), the Gramm-Leach- 

Bliley Act and the Sarbanes- 

Oxley Act (see story below), 

as well as several proposed 

state and federal identity-theft 
prevention laws, impose sig- 
nificant security and adminis- 
trative requirements on com- 
panies. The problem is that 
there are no regulation-specif- 
ic technology standards or 
guidelines that companies can 
adopt to demonstrate compli- 
ance with these requirements. 
The regulations have con- 
siderably increased the legal 
exposure of companies in the 
event of security breaches, 
said Erin Kenneally, a forensic 
analyst and attorney at the San 

Diego Supercomputer Center 

in La Jolla, Calif. “From a legal- 

risk standpoint, it is a very un- 
stable field,” Kenneally said. 


Reasonable Attempts 
Companies must establish 
processes to show that reason 
able attempts are being made 
to secure data, said Bruce 
Heiman, a partner at Preston 
Gates Ellis & Rouvelas Meeds 
LLP in Washington. “You need 
to say what you'll do and do 
what you say,” he said. 
Because most of the laws 
are technology-agnostic, there 
is a “considerable level of in- 
terpretation” regarding how 
they should be implemented 
technologywise, said Lew 
Jagner, chief information 
security officer at the M.D. 
Anderson Cancer Center at 
the University of Texas in 
Houston. “At one level, they 





all boil down to access-control 
systems, audit-control sys- 
tems, some sort of encryption 
capability for confidentiality 
and other administrative stuff, 
such as policy and training.” 
But because the legal view 
of due-care standards may dif- 
fer from a technologist’s view, 
in many cases, the courts will 
have to decide what accept- 
able standards are, said Jon 
Stanley, an attorney on the 
American Bar Association in- 
formation security committee. 
“Something will become a 
standard because a court says 
it is a standard. And ultimate- 
ly, litigation specialists will go 
into IT rooms and say, ‘Here is 
what you are going to have to 





do’” to comply, Stanley said. 

Don’t be surprised to see 
many companies biding their 
time, waiting for such case 
law to emerge before impie- 
menting widespread security- 
related technology changes, 
said Roger Brown, an IT audi- 
tor at Jefferson Health System, 
a $2 billion health care organi- 
zation in Radnor, Pa. 

Though HIPAA’s privacy 
compliance and code-transac- 
tion testing deadlines went 
into effect April 14, health care 
organizations don’t have to 
implement related security 
changes until 2005. But organi- 
zations that haven’t imple- 
mented those changes are un- 
likely to be fully compliant 
with the privacy requirements 
currently in effect, he said. 


“HIPAA should change the 
price of ignoring technology- 
related risks” for health care 
organizations, Brown said. But 
because it’s written vaguely 
from an implementation 
standpoint, he said, the “final 
details will be fleshed out in 
the trial courts.” 

The best way to mitigate le- 
gal exposure is to be proactive 
about putting in place measur- 
able and auditable security 
processes, Kenneally said. 

For instance, any organiza- 
tion should be able to show 
who has access to its systems, 
what measures control and 
monitor that access, what ac- 
countability exists for actions 
within the systems, and how 
systems violations or unautho- 
rized access is detected and 


Security Yardstick 


Standards for evaluating gener- 
al security readiness include: 
= Generally Accepted Informa- 
tion System Security Principles 
from the information Systems 
Security Association. 

#1SO 13335 guidelines for 
management of IT security 

from the International Standards 
Organization. 

= Federal Information System 
Controls Audit Manual from the 
General Accounting Office. 


responded to, Wagner said. 
It’s also vital to have a good 
security-audit logging process 
to ensure that evidence of all 
transactions is stored in a 
manner that meets legal re- 
quirements for reliability, Ken- 
neally said. This might require 
processes for automatically 
transmitting logs from the 
generating host to a central- 
ized logging system to prevent 
tampering, Kenneally said. D 





CFOs Push IT Managers for 
More Info About Projects 


Sarbanes-Oxley 
boosts reporting 
demands for CIOs 


BY THOMAS HOFFMAN 
The financial reporting regu- 
lations that were signed into 
law last year are spurring 
some chief financial officers 
to demand that CIOs provide 
them with more detailed in- 
formation about the status of 
IT projects, according to exec- 
utives and analysts. 

The Sarbanes-Oxley Act, 
which is aimed at producing 
more complete and accurate 
assessments of the financial 
condition of public compa- 





nies, requires businesses to 
disclose “all material off-bal- 
ance-sheet transactions” that 
may affect their capital expen- 
ditures or other aspects of 
their finances. 

Because IT spending ac- 
counts for more than half of 
all capital expenses at many 
companies, CFOs are pushing 
hard to ensure that they can 
update quarterly earnings re- 
ports with as much informa- 
tion as possible about ongoing 
IT projects, said business and 
technology executives. 

“Without question, CFOs 
are going to place more pres- 
sure on everyone in the orga- 
nization because of Sarbanes- 


Financial Reporting Recommendations For ClOs 
m Educate your company's CFO on the technical and financial require- 
ments needed to deliver status reports about IT projects. 


= Account for spending on internal IT projects and joint ventures that may 
require your systems to be linked to those at other companies. 


w Reach out to peers in Europe and other regions to see how they're com- 
plying with financial reporting rules that are already in place there. 





Oxley,” said Paul McFeeters, 
CFO at Kintana Inc., a Sunny- 
vale, Caiif.-based vendor of 
software for monitoring IT op- 
erations and automating tasks 
like project management. 

Companies “can’t run off 
with multimillion-dollar IT 
projects without good visibil- 
ity and controls,” added Mc- 
Feeters, who uses Kintana’s 
digital dashboard software to 
keep track of internal IT proj- 
ects. He said senior executives 
are also requesting more thor- 
ough financial reports from 
corporate officers to satisfy a 
provision of Sarbanes-Oxley 
that requires CEOs and CFOs 
to attest to the accuracy of a 
company’s financial data. 

Steve McDowell, CIO at pri- 
vately held Holiday Retire- 
ment Corp., a Salem, Ore.- 
based operator of senior citi- 
zen housing, said he’s talked 
with IT executives from pub- 
lic companies about Sarbanes- 
Oxley and they “are really 
afraid that it will dominate 
their projects and budgets for 
a while.” 

The push for CIOs to deliv- 
er more comprehensive infor- 
mation about IT spending “is 





very much a trend that we’re 
seeing,” said Jeremy Grigg, a 
Gartner Inc. analyst based in 
New York. But like McFeeters 
and others, Grigg noted that 
the reporting demands being 
placed on CIOs aren’t tied 
solely to Sarbanes-Oxley. 

Indeed, a growing number 
of companies are taking a 
portfolio management ap- 
proach to evaluating the re- 
turns being generated by their 
IT investments [QuickLink 
36205]. Steve Denny, CIO at 
Plano, Texas-based FreightPro, 
has delivered a formal report 
on the status of IT projects to 
the logistics provider’s board 
of directors each quarter for 
the past three and a half years. 
The reports detail the antici- 
pated cost, timeline and bene- 
fits of both new and existing 
projects, he said, adding that 
IT work typically accounts for 
the bulk of FreightPro’s capital 
expenditures. D 


Editor’s Note 

Mark Hall is on vacation. His 
column, On the Mark, will return 
next week. 
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BRIEFS 


John Hancock to 
Outsource to IBM 


John Hancock Financial Services 
Inc. said it plans to outsource 
key IT operations, such as man- 
agement of its servers, main- 
frames and networks, to IBM. 
The companies expect to finalize 
the deal by midyear. Boston- 
based John Hancock said that 
about 100 of the 300 affected IT 
workers will lose their jobs. An- 
other 180 employees will be 
shifted to IBM, and John Han- 
cock will retain 20 people to 
oversee the outsourcing work. 


Boat Maker Picks 
IBM to Operate Net 


IBM also announced a deal to 
host and manage a Web-based 
supply chain network for General 
Dynamics Corp.’s shipbuilding 
division. The Electric Boat Corp. 
unit in Groton, Conn., hopes to 
link 150 suppliers to the network 
by year’s end, IBM said. The net- 
work is built around IBM’s Intel- 
based servers and its Web- 
Sphere and DB2 software. Fi- 
nancial terms weren’t released. 


Siebel, PeopleSoft 
To Cut Workforces 


Siebel Systems Inc. and People- 
Soft Inc. both said they plan to 
cut jobs after reporting weak 
first-quarter results. Siebel, 
which will lay off about 250 of 
its 5,850 workers, said its first- 
quarter profit dropped 93% year 
over year to $4.6 million, and 
revenue fell 70% to $332.8 mil- 
lion. PeopleSoft plans to cut 200 
of its 8,180 workers. It had a 
$38.5 million profit on revenue 
of $460.3 million in the quarter. 


Short Takes 


INTEL CORP. resumed shipments 
of a new 3-GHz Pentium 4 chip, 
a week after putting them on 
hold. ... MAPTUIT CORP., a 
Burlington, Mass.-based devel- 
oper of trucking navigation sys- 
tems, said it has raised $8 mil- 
lion in new financing. 





NEWS 


Disk Arrays Gain in Use 
For Secondary Storage 


But tapes continue to handle most data 
for backups and archiving, survey finds 





BY LUCAS MEARIAN 
ELATIVELY inexpen- 
sive secondary disk 
storage is gaining a 
significant foothold 

in corporate data centers, ac- 

cording to a survey of more 
than 1,000 IT managers that’s 
due to be released next month. 

But the survey also shows that 

a large majority of data is still 

backed up and archived the 

traditional way: on tape. 
Peripheral Concepts Inc., 
which released preliminary re- 
sults of the survey last week, 
said about 50% of the respon- 
dents with disk storage capac- 
ities of more than SOOTB indi- 
cated that they already use 
disk-based devices for sec- 
ondary storage. That includes 
saving snapshot copies of data 
and staging information for 
archiving. Another 25% plan 
to start doing so within two 
years, the consulting firm said. 
But secondary disk storage 
typically involves less than 





one-fifth of a company’s total 
data, said Farid Neema, presi- 
dent and CEO of Santa Bar- 
bara, Calif.-based Peripheral 
Concepts. And only a small 


| percentage of the data that’s 


backed up on disks doesn’t get 
moved to tape devices for 
archiving, Neema said. “Tape 
remains by far the most popu- 
lar medium and does not seem 
to want to go away,” he said. 
Neema cited another poten- 
tial roadblock to wider adop- 
tion of secondary disk storage: 





A “significant percentage” of 
the respondents indicated that 
reliability issues could prevent 
them from using low-cost Ad- 
vanced Technology Attach- 
ment (ATA) disk drives. 

Over the past 12 months, 
vendors such as EMC Corp., 
Network Appliance Inc. and 
Storage Technology Corp. 
have released ATA-based disk 
arrays for storage of near-line 
data, snapshot copies and in- 
formation that will eventually 
be archived on tape devices. 

Mike Lin, director of emerg- 
ing technologies at the Uni- 
versity of Southern California, 
Los Angeles, is testing Stor- 


Do you treat data archiving separately 
from data backup? 


50% 
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ageTek’s BladeStore virtual 
tape server, which acts as an 
intermediary between systems 
and tape libraries. 


Time for Backups 

Lin said the school currently 
backs up 18TB of research and 
administrative data to Sun Mi- 
crosystems Inc. StorEdge 3510 
disk arrays during an eight- 
hour window each night. It 
then archives the data on Stor- 
ageTek 9940 tape drives. 

A terabyte of Fibre Channel 
disk capacity for the Stor- 
Edge arrays costs $65,000 to 
$90,000, depending on how 
it’s configured, Lin said. In 
comparison, he said, a full 
10TB BladeStore array with 
ATA drives costs only $40,000. 

Lin didn’t voice any major 
reliability concerns about ATA 
technology, but he said it takes 
an hour longer — about eight 
hours altogether — to rebuild 
the data on failed ATA disks 
than on Fibre Channel ones. 

Jamie Riis, CIO at BayView 
Financial Trading Group LP in 
Miami, is using a NetApp R100 
NearStore disk array to store 
document images. The array 
replaced an optical system 
that was slow and unwieldy, 
Riis said. Bay View also uses 
the R100 to back up database 
files prior to recording them 
to tape devices, he added. B 





Business Objects Upgrades 
its Data Analysis Software 


BY MARC L. SONGINI 
Business Objects SA last week 
announced an upgrade of its 
data analysis software suite 
that it said includes a more 
consistent Web browser user 
interface plus extended capa- 
bilities for integration with 
ERP and CRM applications. 
The Paris-based company 
said the BusinessObjects En- 
terprise 6 release will also 
provide a boost in perfor- 
mance and scalability. For ex- 
ample, the suite’s thin-client 
Webintelligence tool will pro- 
vide 80% faster response 
times on query and analysis 
operations, said Lance Walter, 
director of product marketing 





for business-intelligence plat- 
forms at Business Objects. 

In addition, Walter said the 
WebiIntelligence upgrade in- 
cludes a single user interface 
for querying, reporting and 
analysis functions. Business 
Objects has also added wizard 
technology to help users per- 
form tasks such as filtering 
out unwanted data or drilling 
down into information about a 
specific unit. Reports can now 
be saved and published within 
Microsoft Excel spreadsheets 
or Adobe Acrobat documents. 

Although Business Objects 
has sped up the log-in process 
for WebIntelligence and up- 
graded the tool’s reporting ca- 





pabilities, the improvements 
could have been even better, 
said Thierry Leleu, business- 
intelligence program manager 
at Unisys Corp. in Blue Bell, 
Pa. Unisys has been running 
WebIntelligence 2.7 since 1998 
and began beta-testing the 
new version in September. 


PRODUCT FEATURES 


= Modular data warehousing 
software that will be sold as a 
SEV mr lli Cm ego le 


* Streamlined configuration 
and installation capabilities. 
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for adding reporting and data 
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applications. 





Leleu declined to comment 
specifically on what Business 
Objects could have done bet- 
ter in the upgrade. Despite the 
shortcomings, he noted that 
he hopes to get some of the 
8,000 WebIntelligence users at 
Unisys live on the new soft- 
ware by July. The added sup- 
port for Excel and greater flex- 
ibility in designing reports are 
particularly attractive features, 
Leleu said. 

Business Objects, which has 
its U.S. headquarters in San 
Jose, said the Enterprise 6 
suite is due for release by May 
15. The upgrade will be able to 
use native interfaces to extract 
data from business applica- 
tions developed by vendors 
like SAP AG, Oracle Corp., 
Siebel Systems Inc. and Peo- 
pleSoft Inc., as well as from 
custom applications. D 





At CDW, our account managers are more than just order takers. TheyTe 


problem solvers. With expertise in thousands of hardware and software 
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options based on your technology set-up. So you get information, advice 
and most important, the technology that's right for you. To find « 


a CDW account manager can do for you, call or visit 
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NEWS 


Microsoft's Server VP Discusses 
ompetition, Future Releases 


Bill Veghte, vice 


president of Mi- | 


crosoft Corp.’s 
Windows Serv- 
er group, spoke 
last week with 
Computer- 
world’s Carol 
Sliwa about the 
competition the 
company’s newly launched 
Windows Server 2003 faces 
and about his thinking on fu- 
ture releases. Excerpts from the 
interview follow: 


Do you consider Linux to be the 
chief competition to Windows 
Server 2003? On the one hand, 
NT 4 is a competitive frame- 
work that I look at. Solaris is, 
AIX is, and Linux is. 


Do you view them all equally? 
Windows Server has three 
core roles: application plat- 
form, IT infrastructure and in- 





formation worker productivi- 
ty, [for] large enterprise, medi- 
um-size business and small 


| business. For each one of 


those, I think of the competi- 
tion as different. 
Where Linux is getting trac- 


| tion is, “I’ve got a Unix app 


and I’m not doing any feature 
development on it. I want the 
cost efficiencies of x86. And I 
don’t want to have to recom- 
pile the app in any significant 
way, etc. Linux looks interest- 
ing.” [If ] I’ve got a simple Web 
server that’s just serving up 
static HTML, Linux looks in- 


| teresting. Those would be ex- 


amples of app workloads pre- 


dominantly in the enterprise. 


| Microsoft will ship some new 
functionality in the coming 


months as add-ons for Windows 
Server 2003. What do you think 
should be free, and what should 
be separate, for-fee products? 


Check-Imaging Bill Spurs 
IT Projects at Large Banks 


Firms add systems, | 


build networks for 
exchanging images 


BY LUCAS MEARIAN 
Wells Fargo & Co. last week 
said it’s joining the list of large 
banks that plan to expand 
their use of imaging technolo- 
gy to prepare for the expected 
passage of legislation giving 
electronic check images the 
same validity as the original 
paper ones for payment clear- 
ance and settlement activities. 
Many banks have already 
adopted check imaging for 
their customers. But most 
have been slower to add tech- 
nology to their back-end sys- 
tems that would enable them 
to exchange images with other 
banks and payment clearing- 
houses for settlement purpos- 





es, according to analysts. In 
large part, that’s because fed- 
eral law currently requires 
banks to send paper copies of 
checks to one another. 

But that’s about to change, 
said Avivah Litan, an analyst at 
Gartner Inc. Late last month, 
the Check Clearing for the 21st 
Century Act, known as Check 


| 21, was reintroduced in Con- 


gress. The measure, which 
Litan expects to win quick ap- 
proval, would allow banks to 
exchange electronic check im- 
ages and use them in place of 
the actual checks. 


Saving Steps 

Mitch Christensen, executive 
vice president of payment 
strategies at Wells Fargo, said 
the San Francisco-based com- 
pany is beginning a six-month 
rollout of IBM hardware and 





| The philosophy that I’ve had 


is anything that has been de- 
livered in essence out of the 
box in Windows Server to 
date, that we’re effectively im- 
proving on, is available for any 
licensed Windows Server 
2003 customer. 

An example of that would 
be Windows SharePoint Ser- 
vices. I think of Windows 
SharePoint Services as the 
next-generation file server. It 
would stand to reason that if I 
think of Windows SharePoint 
Services as a file server, and 
Windows servers are naturally 
file servers, that would be free 
for any Windows Server 2003 
customer. 


Is there any chance you will re- 
visit the decision about Exchange 
Server 2000 not running on Win- 
dows Server 2003? Nope. Not 
on that one. That was a deci- 
sion we made based on some 


imaging software developed 
by Dallas-based Carreker 
Corp. The technology will be 
installed at regional check- 
processing facilities around 
the country, Christensen said. 
Carreker’s suite of image 
processing and archiving ap- 
plications lets users capture 
check images, control and 
monitor access to their image 
repositories and transmit the 
images via the Web, e-mail, 
fax,CDs ortapes. _ 
At Wells Fargo, 9 
the software will 
run on a combi- 
nation of IBM’s 
Unix servers and 
its 3890/XP doc- 
ument-process- 
ing system. 
Christensen 
was unable to say 
how much the 
rollout will cost, 
because Wells 
Fargo still needs 
to determine how 
much new equip- 
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hard engineering realities and 
what we believe was the best 
way to solve some customer 
feedback. 


Is this the pattern customers can 
expect for future versions of 
Exchange - that they will run only 
on the newest operating system? 
No. Boy, that statement I 
would hate to be true. 


It was surprising just over a month 
ago when Brian Valentine, senior 
vice president of the Windows 
division, told us there might be a 
Longhorn server release, after 
Microsoft had said last fall that 
Longhorn would be a client-only 
release. I was shocked, too, I 
promise you. 


Is there any new line of thinking 
on that topic? Yeah, I’ll walk 
you through it, because ... I’ve 
given Brian lots of feedback. 
Here’s how I think about 


ment will be required to sup- 
port the imaging work. In ad- 
dition to the ability to elimi- 
nate exchanges of paper 
checks with other banks, ex- 
pected benefits include faster 
access to checks when pay- 
ment problems arise, he said. 
Hank Farrar, president and 
chief operating officer at The 
Small Value Payments Co. 
(SVPCo), which is creating a 
national network for exchang- 
ing check images, 
estimated that the 
banking industry 
will save $2.1 bil- 
lion annually by 
switching to 
imaging. Paper 
checks require 
manual handling, 
impose trans- 
portation costs 
and can slow 
fraud-detection 
efforts, he said. 
In addition, 
delivering paper 
checks isn’t al- 
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that server release framework 
and what I’m trying to do for 
customers. When customers 
think about Microsoft, they 
want two things. They want a 
regular supply of innovations 
that are solving their problems 
in an integrated, comprehen- 
sive fashion. At the same time, 
they don’t want it every 12 
months. They want it at less 
frequent intervals. I sort of 
like the three-year time hori- 
zon, frankly ... where it’s go- 
ing to make good business 
sense for customers. 

So I look at this and say, 
There’s a set of things that I 
want to slipstream out in the 
marketplace for the customers 
for whom it makes sense and 
then do a big-bang server re- 
lease every couple years. 

The question that the com- 
pany’s been wrestling with is, 
Are there a set of slipstreams 
that we can do to the server to 
make those more relevant? Or 
are we doing a big-bang re- 
lease? Frankly, we’ve had lots 
and lots of discussions’ on it. 
Now that [the launch is] done, - 
it is my highest priority over 
the next couple months to get 
that locked in. D 


ways a reliable means of ex- 
changing data. For instance, 
after the Sept. ll terrorist at- 
tacks, all airline traffic was 
grounded for days, delaying or 
even halting the delivery of 
checks for processing between 
banks, Farrar said. 

About half of U.S. checks 
are imaged and archived to- 
day, but that figure is expected 
to be close to 100% by 2007, 
Litan said. But another step in 
the process is still being ad- 
dressed: creating mechanisms 
that will enable banks to ex- 
change the images. 

A handful of such efforts are 
under way. For example, Far- 
rar said New York-based SVP- 
Co, which is owned by Wells 
Fargo and 19 other banks, 
plans to go online early next 
year with eight banks. “We 
hope we can create an indus- 
try standard,” he said, noting 
that SVPCo is in the midst of 
selecting IT vendors and net- 
work services providers to 
help support its network. D 
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Introducing Information Availability. 
It’s business continuity and more. 


It’s not just about protecting data. It’s about keeping people 
connected to it so your business runs uninterrupted, 24x7. 


Typical business continuity solutions go to great depths to back up applications, 
networks and business-critical information. But what they don’t do is protect your 
organization’s access to it all. That’s where a SunGard Information Availability 
strategy comes in. 
Information Availability goes beyond business continuity by combining technology, 
redundant infrastructure and technical expertise to keep your people and information 
connected, no matter what. When you understand 
the many ways disconnects can happen, you'll see 
why Information Availability is the best way to 
prevent them. Business continuity plans may 
incorporate one or more of the following features, 
but only a SunGard Information Availability strategy 
offers all of these from one source. 


It’s a place to go when workers 
can’t go to work. 


Business continuity plans rarely plan on an emergency closing 
your office or building. A SunGard Information Availability strategy 
does. We can place your people immediately at our over 15,000 
end-user positions in up to 55 
cities — all convenient to J , 
commercial centers and " a @ ww. 
airports. And if you want to keep 
your people close, we can even 
come to you. With 39 fully-equipped mobile facilities, we have the most 
flexible mobile recovery fleet in the industry, ready to roll to virtually 
any location. 


It’s replication of 
your IT system. 


Nobody's IT network of operating 


It’s confident customers, 
always in contact with you. 
Disaster could well strike your 


company. But with an Information 
Availability plan from SunGard, 


your customers may never know it. 


SunGard can help you engineer 
a solution that meets your 
information availability 
requirements. 


systems, servers and 

software works quite 

like yours. SunGard’s 
Information Availability 

program can provide 

you with an optimally 
configured, perfectly 
maintained and 

scalable system, pre- - 
tested, ready and 

waiting to continue your critical 
business processes at a 
moment's notice. 





It’s hardened facilities and high-level security. 


SunGard maintains more than 3 million sq. ft. worldwide of 
strategically placed, hardened facilities, providing you with 
high availability to your information and virtually no downtime. 
Well-staffed facilities feature fully redundant power and 
communications, state-of-the-art equipment, multi-platform 
compatibility and high levels of security. 


It’s off-site data 
storage that’s 
truly off site. 


Some continuity plans 

incorporate in-house 

backup tapes and stor- 

age. But they’re useless 

in a power failure, fire or 

evacuation. SunGard’s 

off-site storage is a key part of Information Availability. Our 
file sharing, primary storage and data backup services are 
backbone. unrivalled for data integrity and reliability. And they free up 
your equipment and people for other purposes. 


It’s a dedicated, 
redundant network 


Every SunGard location is 
connected by nearly 25,000 
miles worldwide of dedicated 
network backbone, providing It’s platform-independent professionals 
on-demand or dedicated bringing it all together. 
DS1/DS3 protocol- 
independent 

communications. 


With SunGard, more than 2,000 Information Availability experts 
are at your fingertips. We can help you with everything from 
m vulnerability assessment and 
~ > impact analysis to planning, tech- 
fy RS 2 nology integration, network and SUNGARD 
“8 Le architecture solutions, deployment, Availability Services 
_ testing and certification. Everything 
you need to keep your business 
running, no matter what. 


The Net Beneath You 





Don’t let lost access to information take your company down. 
Stay up and running with an Information Availability strategy. 


Talk with us. An Information Availability strategy from SunGard can be a life-saver when it 


comes to keeping people and information connected. Data is more time-sensitive than ever. 


And SunGard’s complete continuum of services can protect your information’s availability, 


enterprise-wide. From tiered applications recovered as fast as 


48 hours, to high availability applications in as little as 2 hours, 


to managed services that provide continuous access to critical 


information. 


SunGard offers the industry’s most comprehensive Information 


Availability services — from planning, traditional disaster recovery, 


network and managed services to IT outsourcing, professional 


consulting and high availability solutions. Plus, end-user recovery 


facilities where your people can go to reconnect with data in an 


emergency. In fact, nearly 90% of U.S. companies with $1 million 


or more in revenue are located within 35 miles of one of our facilities.” 


Every day, we help ensure that over 10,000 
clients worldwide have uninterrupted access to 
their business-critical information. They count 
on us to supply the people, technology and 
infrastructure necessary to provide multiple 
points of access to information, flexible alternate 
workplace options for their employees, and 
updated continuity plans and systems to meet 
their future technology needs. 

SunGard is one of the largest providers of 
platform-independent business continuity, 


managed hosting services and more. No 


company has more ways to keep your business in business. See how your company 


rates on Information Availability right now. Take our Information Availability Challenge at 


www.availability.ssungard.com/iac 


*Source: Dunn & Bradstreet's MDDI 


SunGard: The Net Beneath You. 
With SunGard you get 
* the company that founded the recovery 
industry in 1978 
© comprehensive support for more than 
30 platforms 
e 75 facilities in 10 countries with more than 
15,000 end-user positions worldwide 
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Managing mobility can be challenging. Recognize any of those issues? Or, perhaps, all of them? We thought 
Se be so. Many of these issues can be related to your legacy desktop 


That's why there’s Windows XP and Office XP. software. Fortunately, many of them can be addressed by features in 
Microsoft® Windows® XP Professional and Office XP Professional. 





Want specific examples? Windows XP Professional offers new HTTPS, and FTP, which means you can install and maintain the suite 
Remote Assistance, which enables you to view a user’s screen and directly from a Web server or a file share on your network. And finally, 
control the user’s computer to solve technical problems from afar. several new features make deployment easier than ever. For more 
Office XP Professional gives you installation support for HTTP, ideas about managing your desktops, visit microsoft.com/desktop 
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OPINION 


PATRICIA KEEFE 


Surviving a Sea Change 


HE IT COMMUNITY, from code jock- 

eys all the way up to the executive 

suite, is undergoing a sea change. The 

existence of everything IT, from job 

categories to entire departments, is up 
for reassessment, reassignment — and maybe even 
headed toward redundancy. 


The most obvious 
change involves the loss 
of IT jobs. Many have 
gone abroad, and they 
aren’t coming back. Off- 
shore outsourcing as a 
percentage of IT bud- 
gets went from 12% in 
2000 to 28% in 2003, ac- 
cording to Forrester Re- 
search. The U.S. Bureau 
of Labor Statistics esti- 
mates that there are now 
212,000 unemployed 
computer and mathematics profes- 
sionals. No doubt the number 
would be even higher but for the IT 
workers who have given up and 
moved on to different careers. 

It’s only going to get worse as 
more and more companies out- 
source more and more functions 
(see story, page 39). Meta Group is 
predicting that as many as 50% of 
all U.S. IT workers could shift to 
contract labor by 2007. Meanwhile, 
our seed corn is under siege: Fewer 
students are opting for computer 
science degrees as more corporate 
recruiters skip college campuses. 

We have also suffered the loss of 
IT credibility. Massive sums of 
money have been spent on IT in the 
past five years, and many business- 
es remain unsure of the benefits. 
Large projects that failed, disasters 
that didn’t happen, revolutions that 
didn’t come, ROI that can’t be quan- 
tified — all have dimmed the aura 
that surrounded IT in the late ’90s. 

And then there are command-and- 
control issues. Should the IT func- 
tion be dispersed across business 
units? Has IT become a utility or 
perhaps so pervasive that having a 





specific department is 
no longer warranted? 
Should the whole she- 
bang be outsourced, or is 
IT still too critical to 
corporate strategy? 
There’s no question 
that the industry is 
changing before our eyes. 
Our community needs to 
move past the gtale de- 
bate over whether we are 
experiencing a wholesale 
sellout of IT workers or 
an inevitable, economically fueled 
evolution. The train has already left 
the station, and we need to figure out 
where it’s heading from here. We 
need to focus on how changes taking 
place today will shape the next phase 
of this industry. Some issues you 
might want to consider: 
@ What are your core competen- 
cies and core business needs? 





@ How will your company comply 
with new government privacy and 
accounting regulations — many of 
which will require system upgrades? 

@ How would an ever-changing 
group of contract workers affect 
your budget, project schedules, 
quality assurance, maintenance and 
upgrade processes and plans? 

g If projects are built by contract 
workers, should their costs be 
borne by the affected business 
units? And taking this further, do 
business units need to go through 
IT to get projects done? 

g@ If IT isn’t the builder of proj- 
ects or the supplier of labor, into 
what will it evolve? What kind of 
value will it bring to the business? 

g If key skills are outsourced 
abroad, who will fuel the next gen- 
eration of technological innovation 
in this country? 

g@ What new IT and management 
skills will be in demand? 

Given that technology is the future 
in industry after industry, it’s clear 
that IT will have a key role to play. 
But whatever that role becomes, 
make sure your voice is heard. You 
can tell us what you think by visiting 
the discussion forum of Computer- 
world.com [QuickLink a3070]. Help 
plan the future now! D 
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PIMM FOX 


Security for 
Web Services 


HERE ARE three vital 

parts to the open stan- 

dards underlying Web 
services security. There’s 
authentication, which uses 
Standard Generalized Markup 
Language (SGML) to ex- 
change information about a 
particular user. There’s autho- 


rization, which grants access 
control via Extensible Access Control 
Markup Language (XACML). And, 
finally, there’s the administration layer 
now managed through the use of Ser- 
vice Provisioning Markup Language, 
or SPML. 

SPML automates 
the creation of user 
accounts through a 
role-based access- 
control model. Using 
SPML, it’s possible 
to approve, modify 
and cancel accounts 
across the enterprise 
without having to 
manually access 
rules for each ac- a 
count. This means eat ‘ 
IT folks working on portals and appli- 
cation servers and in service centers 
have a standard mechanism for creat- 
ing a request that will work through- 
out the organization. 

For example, if you went to your 
supply chain partner’s site to grab 
information stored in a back-office 
system, the vendor would send a re- 
sponse with a request using SPML to 
communicate with an identity man- 
agement software package. The re- 
quest would automatically acquire 
the appropriate permissions before 
granting you access to the data. This 
would happen without your having 
to know about your vendor’s back- 
office system. 

As part of the tool kit to build such 
a Web service, SPML automates the 
process and acts as an XML-based 
provisioning service, making it 
straightforward — at least from the 
user’s point of view — to dynamically 
read things from a directory. 

Darran Rolls, director of technology 
at Waveset Technologies Inc. in Austin 
(and chairman of the Provisioning 
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Services Technical Committee and 
co-chairman of the Security Standards 
Joint Committee at OASIS), says SPML 
should make it possible for companies 
to move beyond their tentative em- 
brace of Web services. 

“SPML is a critical piece of the secu- 
rity stack for Web services,” he says. 
“It’s useful to have an open-standards- 
based way to establish accounts.” 

You can learn more about OASIS 
and SPML at www.OpenSPML.org, 
where SPML is available for free. 

The odd thing about the release of 
the SPML standard from OASIS is that 
on the surface, it would have made 
more sense to develop SPML before 
SGML and XACML. In their haste to 
demonstrate the cohesive security of 
Web services, vendors ignored the 
management layer. In a sense, they 
were so excited to identify people and 
give them access to a Web service that 
they forgot the basics of account 
provisioning. 

Although it’s great that SPML is al- 
most here, if it had been here from 
the beginning, maybe Web services 
would be more real today instead of 
so much hype. D 


THORNTON MAY 


Real-Time 
Information 
Weapons 


FIND IT perversely ironic 

that the department most 

responsible for creating 
the dynamic real-time econo- 
my we live in today (IT, of 
course) continues, in many 
cases, to operate with Indus- 
trial Age, could-have-been- 
designed-by-Poppa-Joe-Stalin 
batchlike processes. 

This situation has to change, and 
people are beginning to see how to do 
it. Researchers designing executive 
education classes at the Fisher College 
of Business at Ohio State University 
and the Comdex CIO “boot camp” 
program asked 50 IT leaders to rank 
key processes on the basis of being 
behind the curve, on the curve or 
ahead of the curve. 

The IT process most in need of 
improvement on the curve is demand 
management, followed closely by 
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portfolio management. 
These two processes di- 
rectly and substantively af- 
fect the cost of IT inside a 
company and its perceived 
value — two issues sitting 
top-of-mind with CIOs. 
These two processes need 
to be done in real time. 

IT departments are no 
strangers to process analy- 
sis and remediation. In- 
deed, several companies 
have asked their IT shops 
to apply this skill to the 
rest of the organization. It’s 
now time to apply these vaunted 
see-the-process/improve-the-process 
skills to IT itself. 

In 1987, my friend and research col- 
league William R. Synnott (then vice 
president of data processing at Bank 
of Boston) wrote the book The Infor- 
mation Weapon: Winning Customers 
and Markets Through Technology. In 
addition to writing the first print in- 
stance of the term CIO, Synnott pre- 
sented the metaphor of the IT shop as 
an armory — a creator of capabilities 
(“information weapons”) that could 
deliver business advantage. 


Another Look at What Lies Ahead for IT 








Information weapons 
create value when IT gets 
users to choose something 
important as a target and 
then delivers the informa- 
tion weapon to the select- 
ed bull’s-eye. But before 
you start, you need to ask 
yourself five questions: 

land 2. Where and by 
whom do IT targeting 
decisions get made? 

3 and 4. How and when 
do IT targeting decisions 
get made? 

5. Are you happy with 
your answers to the first four ques- 
tions? 

Few of us go through this basic 
Q&A, which helps explain why the 
technology management process 
hasn’t really been integrated with 
project management or financial 
management processes. 

The challenge facing those who 
would improve the preproject portion 
of the demand management process 
is that users don’t really understand 
what technology can do, nor do they 


know how much technology has really | 


changed. 


aa 


server data centers. The idea of 





A direct analogy can be drawn to 
the difference between the smart pre- 
cision bombs of the current military 
campaign in Iraq and the dumb bombs 


| used in World War II. 


During WWII, an average B-17 


| bomb missed its target by some 2,300 
| feet. If you wanted a 90% probability 
| of hitting a particular target, you 

| had to drop some 9,000 bombs. That 

| required a bombing run of 1,000 


bombers and placed 10,000 men at 


| risk (not to mention the poor souls 
| on the ground). 


In contrast, with the latest weapon- 


ry, one plane flown by one man with 


one bomb could have the same proba- 
bility of hitting its target. 
Today, we have more accurate infor- 


| mation weapons. Many users don’t 


know this. And even if they did, our 
targeting still stinks. 
So the one big IT project you might 


| want to approve this year is a real- 
; time demand management and port- 


folio management system. D 
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More columnists and links to archives of previous 
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If such a shortage exists, why 





OR COST, quality-of-service 
and security reasons, Cap 

Gemini Ernst & Young Chief Tech- 
nologist John Parkinson's fantasy 
of only 100 companies providing 
the majority of computer services 
to the world won't come to light, 
despite the greed of Ernst & Young, 
Microsoft, IBM and EDS in trying to 
control everyone's data[“TheIns | 
and Outs of IT,” QuickLink 36727]. 

In fact, the trend is just the oppo- 
site, toward Linux and decentral- 
ized data. This is for good reason. 
Microsoft became popular because 
the high expense, poor quality of 
service, arrogance and incompe- 
tence of companies’ central com- 
puter departments (commonly 
called MIS) caused other depart- 
ments to purchase their own sys- 
tems, which would be under their 
own control. 

It's unfortunate you chose to run 
such an article. 
Bob Toxen 
Chief technical officer, 
Fly-By-Day Consulting Inc., 
Duluth, Ga., 





bob@verysecurelinux.com 


AGREE WITH John Parkinson 

that new technology will be pro- 
duced, but history has taught us 
that business doesn't move quickly 
to adopt the new processes that 
new technology demands. 

Manufacturing resource plan- 
ning took 15 to 20 years to really 
grab hold, and today there are 
many companies that have not 
moved to ERP, though they should 
have. 
Paul E. Miller 
Partner, Computer Sciences 
Corp., Cheshire, Conn., 
pmille32@csc.com 


Taking Advantage 
Of Mainframe Skills 


HE ARTICLE “Mainframe Brain 

Drain Looms” [QuickLink 
37362] certainly reinforces some 
of the issues | have found over re- 
cent years. However, | would like to 
suggest another spin on this. A lot 
of the skills that mainframe data 
center personnel have are in fact 
the same skills lacking from open- 





properly organized shifts with actual 
operators to monitor and manage 
those systems just doesn’t exist. 
You routinely see highly paid staff 
like sysadmins or DBAs doing the 
work that a console or system oper- 
ator would do in a mainframe world. 

The problem is a cultural one - a 
failure to put things together so that 
it can be handed over to operations 
staff to take care of using the sim- 
ple, functional interface and proce- 
dures you have provided. 

In fact, |am constantly amazed 
at the amount of time spent re- 
inventing what the mainframe - 
because it grew from the idea of 
stability and reliability being No. 1 
to the organization and user - 
already had. 

Peter Dominey 
Independent Unix 
contractor, Dallas, 
pdominey@dominey.biz 


OUR ARTICLE “Mainframe 

Brain Drain Looms” startles 
me. It gives the impression that 
employers are wringing their hands 
in deep concern that they will be 
unable to find local talent. 





aren't there more ads requesting 
mainframe skills? 

|. Federman 

Lake View Terrace, Calif. 


EGARDING the article “Main- 
frame Brain Drain Looms,” 
it's true that those of us with main- 
frame skills are generally over 50. 
However, if there is a shortage, 
why is it that none of us can find 
ajob? Could there possibly be 
some age discrimination in the 
marketplace? 
M. Shepard 
IT manager, Noroton, Conn. 
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Dr. Tim Grieser is responsible for performance and availability 
management software research in IDC’s Enterprise Systems 
Management Software program. His coverage includes service 
level management for systems and applications across a wide 
variety of platforms. 
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A few minutes with Tim Grieser, 
VP, Enterprise System Management Software Program, 
International Data Corp. (IDC) 


Fight Data Center Complexity with Self-Managing Servers 


> We now hear the terms “self-managing,” 
“self-healing,” “self-protecting,” “self-optimizing,” 
“self-configuring,” “policy-based,” “holistic,” 
“introspective,” “autonomic” and “smart” 
computing for systems management software — 
what does this all mean? 

All of these terms refer to putting more system 

management intelligence into software tools, so that 

problem detection, diagnosis and response can be 

performed automatically in an increasing number of cases. 


> Just how real and proven are the lofty claims of 

vendors about self-managing IT infrastructures? 
Quite real. Some aspects of self-management have been 
successfully implemented in production environments for 
a number of years. For example, scripted responses 
(such as re-booting a server) to fix common problems 
(such as running out of available memory space) are 
commonly deployed. Techniques such as event 
correlation are used to help determine which of several 
events is most likely to be the fundamental or “root 
cause” of a problem. 


> Why is this all so important and what are the 

most significant benefits to the enterprise? 
What is really important in today’s complex, distributed 
environments is to simplify the job of system 
management. With increasing platform complexity, and 
constraints on IT budgets, IT professionals such as system 
administrators are being asked to manage more and more 
infrastructure elements, such as servers, in less time. 
Indeed, “doing more with less” is a common job 
requirement for system administrators these days. 
Intelligent system management software can simplify the 
job of administrators by automating responses to known 
types-of problems, thus reducing the number of situations 
that require manual intervention by the IT expert. 
Benefits to IT include cost savings, the ability to “scale” to 
manage ever increasing numbers of servers and server 
images, and improved service levels such as system 
performance and availability. 


> How does an enterprise implement these 
capabilities across dissimilar platforms, and are 
standards important? 
Typically, there will be platform-specific management 
components (such as monitoring agents for Windows and 
Unix servers) linked to common management components 
such as “consoles.” The common management 
components often deal with automatic responses to 
events, and also work with higher level constructs, such as 
applications and end-user views. Standards are useful in that 
they can enable easier data gathering, such as monitoring, 
across platforms.Also, system management tools often use 
standards to communicate information from basic 
monitors to higher-level management consoles. 


“What is really important 

in today’s complex, distributed 
environments is to simplify the 
job of system management.” 


> What can we expect from this technology 

three years from now? 
The direction is clearly toward higher levels of 
automated responses, not only to fix operational 
interrupts or breakages, but also to address dynamic 
management of resources (such as dynamic load 
balancing and provisioning servers as needed) in order 
to achieve desired service levels. More and more, the 
objective is to reduce manual intervention to diagnose 
and fix problems, so that higher levels of scalability, 
performance and availability can be achieved. 


For more information, please call 800-874-8647 x385 
or visit www.unisys.com/datacenter/sentinel 
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La-Z-Boy thought 
managing its servers 
would never be simple. 








We put that idea to rest. 1 
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Imagine it: 


Fighting complexity. Scaling up with simplicity. ~ 


The IT team-at La-Z-Boy Incorporated experi- 


enced an explosion of servers and applications. . 


One Unisys ES7000 enterprise server simplified 

management to a standardized platform, and 

offered flexible partitioning to adjust to 
aad 

Ai 


changing needs. \ 
Done: 
Today the Unisys ES7000 family of enterprise 


servers comes with true self-managing, self- 


healing systems to harness the-massive power 


of up to 32 Intel” Xeon™ processors. It can 
also help simplify your operations through 
standardization on Microsoft® Windows” 
2000 Datacenter Server. One more detail: 
the cost of the ES7000 is as low as 1/3 the 


cost of comparable UNIX systems. 


Server Technology with precision thinking, 


relentless execution to drive your vision forward. 


Imagine it. Done. 


unisys.com 800.874.8647 x370 
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IT manager leaves office 
for lunch 


After deploying a firewall and intrusion 
protection solution from Nokia, Daniel Heslip 
confidently leaves building for one full hour 


need extra energy, yOu just ask them q 
cuper-size it for you. They are total 
flexible,” says Heslip, “and, delicio 
It was a pretty easy choice real 


According to sources, at 12:10 pm on 

Friday, Heslip approached reception 

and proclaimed that he was “going out 

for a bit.” “No one took him seriously,” 

said Nora, sen- Nokia’s Internet security solutions CO 

Pre-installed, jor receptionist pre-installed, pre-configured and 2 

. at the time. “But, compatible with my IP netwo 
Pre-configured then I noticed Implementation was easier t 
and tested that he actually choosing lunch today, I'll tell 
walked out the that right now.” Whether it’s 

scalability of the Nokia platform 
the built-in IP routing functiong 
one thing is certain, it’s allo 
IT guys to experience basic da 
day activities that the rest of so 


door,and he was gone for a whole hour.” 
Before Nokia, Heslip claims he didn’t 
have the flexibility or control to manage 
all the details of his network's security 
system. “What's so great about the new 


hing, a lot like takes for granted. 


system? Well, for one t 
this new burger place I just discovered, “Nokia also has 24-hour, seven-¢ 


Find out can be scaled week global support, which just 

why IDC ‘nde TF hat if 1 d help Id 1 have t 

top spot in Pi se reported that Nokia h 1 vou > that if need n° p | don't have i 
competitive firewall applia cae captured 

segment. 


The Nok 
panto approach to security integrates the 
est security software with Nokia’s 


whatever platform you buy 


purpose-built hardened hardw 
system, and rapid deployme eae 
—— nt managem 
ce eae a_ best-of-breed saiini 
ae implement and manage. Take 
ieee oe with Check Point Software 
oe , world leader in VPN/Firewall 
that allows organizations to deploy a 


sin 

See solution for secure Internet 
oon on Or, Internet Security Systems™ 
ins tin ete peas ale 
ae protection applian 
= ee Our program for security Se 
See agg to add other certified security 
Nee oo network Management agents, 
ponds application security. , 

unch, visit 


www.noki 
okia.com/get_a_life/americas 
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VPNs Made Easy 


Secure Sockets Layer virtual private 
networks make accessing Web- 
enabled applications as easy as 
launching a browser. But other 
applications still require client 
software, so you may end up using 
an IPsec VPN as well. Page 28 





QUICKSTUDY 

Blogs 

A weblog, or blog, is a Web site 
where an individual records his 
own thoughts and opinions as 
well as comments from others 
and offers links to other Web 
resources. Page 30 


SECURITY MANAGER'S JOURNAL 


Merger Security Hinges 

On Gateway Appliance 

An integrated security gateway 
appliance could provide interim access 
between Mathias Thurman’s company 
and one that it’s acquiring, without 
compromising security. Page 32 








Four beta users say 
the migration brings 


efficiency gains but 
requires careful plan- 
| ning. 


ICROSOFT CORP. launched 
its long-delayed Windows 
Server 2003 operating sys- 
tem last week, but some 
users couldn’t wait. 
Nasdaq Stock Market Inc. and Jet- 
Blue Airways Corp. jumped from Win- 
dows 2000 Server to the Windows 
2003 beta to gain a performance edge 
and pursue server consolidation. 
Meanwhile, the Kentucky Depart- 
ment of Education (KDE) and Intra- 
west Corp. took the plunge in hopes 
that Active Directory would help rein 
in the many domain controllers they 
had with Windows NT 4.0. 
Windows Server 2003 promises im- 


provements in performance, scalability, | 


reliability, security, manageability, net- 
working and its integrated .Net devel- 
opment framework. But migrating to a 
new server operating system is no snap 
for any IT shop, once the planning, 
testing and potential disruption to end 
users are factored into the equation. 

All four of these early adopters said 
they realized benefits from migrating 
to Windows Server 2003, but they also 
expended months of effort to make 
sure they did. Plus, as participants in 
Microsoft’s joint development or rapid 
adoption programs, they received spe- 
cial assistance to ensure that their 
projects went smoothly. 

Careful assessment and planning 
will be crucial for any company mi- 
grating to Windows Server 2003, in or- 
der to realize the full business benefits 
and justify the expense in a tough 
economy, analysts and consultants say. 

IT managers need to step back and 
envision the future, advises Chris Bur- 


Seattle-based joint venture between 
Accenture Ltd. and Microsoft. Burry 
says IT shops should weigh questions 
such as what role directory services 
will play in their business and how 
those services can enable provisioning, 
security and management. “If you look 
at what you need the infrastructure to 
do,” Burry says, “that’s the best way to 
organize your migration.” 


Directory Drives Migration 
For organizations using NT 4, such as 
the KDE, Active Directory is often the 
first step of the migration. KDE had 
over 300 Windows NT 4.0 domains 
and more than 2,000 domain con- 
trollers dotting the state’s 176 school 
districts and 1,400 schools, and the dis- 
tributed systems had become tough to 
manage and patch, particularly from a 
security standpoint. 

Chuck Austin, project manager of 
the Kentucky Education Technology 
System, says both IT staffers and 
school superintendents saw the bene- 
fits of using Active Directory to cen- 
trally manage critical network re- 
sources and deliver services. Their 
goal is to improve security, reduce re- 
curring costs and complexity, stabilize 
backbone services and lay a founda- 
tion for better collaboration among the 
state’s 600,000 students and 100,000 
teachers and administrators. 

To preserve local autonomy, the IT 
department will delegate authority for 
managing users, computers and groups 
to network administrators in the dis- 
tricts, Austin says. Each district will 
have at least one Windows Server 2003 
domain controller and a global catalog 
server, and about 20 districts are ex- 
pected to continue to run Novell Inc.’s 
NetWare in tandem. 

Tim Cornett, the KDE’s Active Di- 
rectory lead architect, says the directo- 
ry migration to Windows Server 2003 
has been easier than it would have 


| been with Windows 2000 Server be- 


cause he doesn’t have to manually cre- 
ate connection objects for replication 


4 | 4 
ry, a technology infrastructure practice between domain controllers. 


director at consultancy Avanade Inc., a 


In Windows 2000, the process that 
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automatically creates replica- 
tion connections between 
domain controllers can’t be 
used when a forest of Active 
Directory domain trees con- 
tains a large number of sites. 
Administrators must create 
and maintain intersite repli- 
cation topologies. 

Cornett says guidelines ad- 
vise companies with large 
deployments to turn off some 
of the automated features in 
Windows 2000 Server. But 
he shouldn't have to do that with Win- 
dows Server 2003, because the new In- 
ter-Site Topology Generator uses im- 
proved algorithms and can scale to 
support a forest with a greater number 
of sites. Cornett says that will save a 
tremendous amount of work. It will 
also lessen the expensive bandwidth 
for replication to 176 districts, Austin 
adds. 

Another overall benefit from the Ac- 
tive Directory migration, which is due 
for completion by year’s end, will be 
the reduction of the 2,000-plus domain 
controllers to 400 and the 300-plus do- 
mains to 178, Austin says. When the 
KDE migrates its 320 Exchange and 
700 Web servers, it hopes to achieve 
server consolidation, he adds. 


Domain Servers Reduced 
Intrawest has about 130 Windows NT 
4 servers involved in domain and secu- 
rity tasks. But the IT department is 
aiming to reduce the “god-awful mess” 
to 40 dual-processor Dell Computer 
Corp. PowerEdge 2650s running Win- 
dows Server 2003 Standard Edition, 
says Matthew Dunn, CIO at the Van- 
couver, British Columbia-based resort 
operator and developer. He says the 
company’s 35 active domains — with 

a “snake’s nest of trust relationships” 
among them — will be cut to two, 
thanks to six months of careful consid- 
eration and planning. 

One challenge that Intrawest en- 
countered in figuring out the best way 
to address the problem was wading 
through the boatload of documents 
that Microsoft makes available to cus- 
tomers. “Microsoft is almost guilty of 
supplying too much information,” 
Dunn says with a laugh. “Microsoft 
Consulting Services was helpful, in 
part, as a guide in the wilderness of 
documents.” 

Plans call for Intrawest’s Microsoft 
and in-house applications to be migrat- 
ed from Windows NT and 2000 to 
Windows Server 2003 over the next 
two years. Dunn says he wants a .Net- 
centric architecture to pave the way for | 
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the servers can handle more sessions 


Windows 2000 Server. 
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the Web services he hopes 
will help disparate systems 
talk to one another through 
XML and SOAP. “Because of 
the performance gains,” he 
adds, “there’s an opportunity 
to pursue consolidation as 
well as migration.” 


Shrinking the 
Web Server Farm 


Steve Randich, CIO at Nas- 
daq in New York, says Nas- 
daq.com saw a 25% to 30% 
boost in performance running Win- 
dows Server 2003. That enabled his 
staff to consolidate 75 four-processor 
Dell Web servers to 35 servers. Stress- 
testing tools from Mercury Interactive 
Corp. in Sunnyvale, Calif., showed that 


and users. “We pay less maintenance 
when we have less boxes in produc- 
tion,” Randich says, adding that he also 
expects to reduce licenses. 
Application code has run more reli- 
ably, and servers required fewer patch- 
es than Windows 2000 Server did dur- 
ing its beta period, says J.P. Athey, vice 
president of Nasdaq network and Web 
technology. He says migrating Web 
servers still involves the typical inten- 
sive testing effort, but he found it 
“more seamless” than the move to 


Server consolidation, performance, | 
enhanced security and total cost of 





| Co., hopes to go from 1,100 


ownership benefits will be 
the key drivers when Nasdaq 
looks to migrate other Web, 
database, transaction pro- 


| cessing and application 
| servers from Windows 2000, 


Athey adds. Nasdaq, which is 
doing a server consolidation 
study with Hewlett-Packard 


servers to 700, he says. 

Rick Fricchione, vice presi- 
dent of Microsoft services at 
HP, says IT shops often start 


with migration and move to consolida- 


tion to cost-justify the upgrade. But he 
warns that they need to focus on ser- 
vice management, availability and reli- 


| ability once there are tens of servers 


each supporting 1,000 users, rather 
than hundreds of servers handling 100 
users each. “The biggest gotcha we’ve 
seen is understanding that you’re 
much more mission-critical when you 
come out the other end,” he says. “In- 
stead of having 100 people impacted 
when a machine goes down, you may 
have 1,000 impacted. So operational 
best practices matter greatly.” 


Boosting Scalability 


Improvements to Windows’ Distributed 
File System (DFS) were a major impe- 
tus for JetBlue Airways to upgrade to 
Windows Server 2003. The Forest Hills, 
N.Y.-based airline relies on DFS ser- 
vices to distribute electronic manuals 


SHOULD YOU UPGRADE? 


Windows Server 2003 has been described 
as not much more than an incremental 
upgrade to Windows 2000 Server. But 
some users and analysts say a few key fea- 
tures set it apart, such as the following: 


Active Directory improvements, includ- 
ing cross-forest trust, domain rename and 
schema redefine capabilities, more efficient 
replication and synchronization, a new 
group policy management console and new 
group policy settings, and the ability to load 
directory content from backup media such 
as CDs, DVDs and file copies without repli- 
cating across the corporate network. 


Enhanced security, including the lock- 
down by default of Internet Information 
Server 6.0 and a new Internet Connection 
Firewall to protect and monitor traffic be- 
tween the network and the Internet. 


Internet information Server 6.0, which 
is based on a new request-processing ar- 
chitecture. It provides an application isola- 


tion environment to prevent one application 
or site from stopping another and to reduce 
the time needed to restart services. 


Volume Shadow Copy Service, which 
enables rapid “snapshot” backups of 
servers without disrupting applications. 


Built-in .Net Framework support, along 
with native support for Web services stan- 
dards such as XML, SOAP, Web Services 

Description Language and UDDI. 


Support for 64-bit computing in Enter- 
prise and Datacenter editions. 


Windows System Resource Manager, 
which lets IT managers allocate CPU and 
memory on a per-application basis. 


More scalable, efficient Distributed File 
System allows multiple DFS routes to be 
hosted on each server; during system fail- 
ure, a server fails to the nearest available 
server. 
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to pilots as part of its paper- 
less cockpit initiative. 

JetBlue CIO Jeff Cohen says 
DFS replication in Windows 
2000 Server sometimes didn’t 
work “as advertised” in updat- 
ing changes made in the root 
folders. But the new version 
of DFS fixes the problem and 
affords more granular control 
over replication, he says. 

An all-Microsoft shop, the 
3-year-old airline likes to run 
the latest technology and 
regularly participates in Microsoft's 
joint development and rapid adoption 
programs. JetBlue sometimes runs 40% 
of its systems on beta software, Cohen 
says, but there’s minimal risk because 
Microsoft “is standing by your side.” 
By May 19, JetBlue will have devoted 
over 5,000 man-hours to testing, plan- 
ning and developing applications for 
Windows Server 2003. Its migration of 
250 Windows 2000 servers started 
with the “extremely smooth” upgrade 
of 22 domain controllers, he says. One 
of the few minor issues was that HP’s 
SmartStart setup utility wasn’t ready to 
help configure the servers, Cohen 
notes. 

JetBlue is also shifting mission-criti- 
cal applications to Windows Server 
2003 Datacenter Edition on Unisys 


| Corp. ES7000 boxes, including two 


running 64-bit Windows Datacenter 
on Itanium 2 processors. The company 
has three ES7000s in production and 
four more in the works. 

Next month, JetBlue will go live with 
the new 64-bit SQL Server 2000 for its 
frequent-flier program, a move Cohen 
likens to doubling the size of a highway 
during rush-hour traffic. The company 
also plans to run its entire Web server 
front end on ES7000s. “These servers 
can give five 9s of reliability,” Cohen 
says. “We’re running an airline. We 
cannot afford to be down.” 

But Avanade’s Burry warns that Dat- 
acenter may not be the right choice for 
every IT shop considering Windows 
Server 2003. Each company will need 
to carefully weigh the economic im- 
pact of downtime, he says. 

“As you drive up the availability, you 
also drive up the cost,” Burry says. 
“There are places where Datacenter 
Server is absolutely marvelous. But it 
needs to be connected to the require- 
ments of your business.” D 


MIGRATION HELPERS 


Tools from Microsoft and other companies can 
smooth the Windows migration path: 
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lronic how it takes the cutting edge 
technology of 2003 to access the 
cutting edge technology of 1973. 


myEXTRA!™ Smart Connectors let you leverage your existing legacy data and logic 


“Cutting edge” doesn’t cut it. You need products 
that do what they say they will do. This is what 
we say: Our myEXTRA! Smart Connectors give you 
XML-based Web services — they let you get at legacy 
information without changing host applications. 
You can put all of the business data and applica- 
tions locked up in mainframes to new use in hours 
or days, not weeks or months. We've spent the last 
18 years making legacy data more useful. Smart 
Connectors are the logical next step, making data 


easier to get at. 


Find out more. Download our free White Paper 
“Leveraging Legacy Applications to Serve New 


Business Initiatives” at www.attachmate.com/SC7. 


attachmate 
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SSL virtual private 
networks are simpler to 
set up than traditional 
IPsec VPNs, but most 
organizations will 
probably end up using 
both. By Alan Radding 


HYSICIANS AT CATHOLIC HEALTH SYSTEM 
in Buffalo, N-Y., want access to medical 
information and images. Managers at 
Perry Manufacturing Co. in Mount Airy, 
N.C., need remote access to e-mail and 
applications running on an AS/400. At 
these businesses and elsewhere, users 
are becoming increasingly reliant on remote access 
to business applications and data. 

Yet even in the era of the Internet, there has been 
no easy and secure way to provide remote access to 
the data and applications users need. Dial-up con- 
nections, terminal emulation tools, Internet portals 
and traditional virtual private networks (VPN) can 
do some of the job, but each has its limitations. 

“We had an old dial-up product to reach the 
AS/400, but no e-mail,” recalls Howard Ward, Perry’s 
director of information systems. The company had 
Cisco’s Easy VPN for e-mail but found it to be too 
slow, he adds. 

Catholic Health wanted to give physicians remote 
access to patient information and medical test re- 
sults. Its first attempt — sending medical information 
and images via fax — proved cumbersome. Then it 
deployed a VPN based on the IPsec protocol. That 
provided session encryption and authentication and 
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enabled network-level access to resources, but it also 
proved problematic. “Some physicians still use our 
VPN, but there are real support issues. You need to 
configure software on each client. What we wanted 
was an application-level gateway of some sort,” ex- 
plains Douglas Torre, director of networking and 
technical services at the health care services pro- 
vider in western New York. 

Both he and Ward have turned to Secure Sockets 
Layer (SSL) VPN appliances, which provide that ap- 
plication-level gateway by allowing remote access 
over the Internet to Web-friendly applications. 


No-Hassle VPNs 

While IPsec VPNs provide broad, flexible network- 
level access, SSL VPNs let remote users access spe- 
cific applications over an intranet or the Internet us- 
ing a Web browser. In its purest form, the SSL VPN is 
clientless, relying only on a Web browser to run any 
application that can present an HTML interface. In 
other cases, users may need to download a browser 
plug-in, such as a Java or ActiveX component, in or- 
der to access a specific application. 

Like its IPsec counterpart, the SSL VPN establish- 
es a secure channel of communication. But it termi- 
nates the session outside the corporate firewall, usu- 
ally to a server or appliance in the DMZ (the “demili- 
tarized zone” between the secure corporate network 
and the public Internet). The user sessions then pass 
through to various internal systems using the appro- 
priate interfaces and protocols. 

In contrast, IPsec VPNs typically require the in- 
stallation and management of complicated client 
software. These setups can be difficult and expensive 
to manage, especially if client machines aren’t under 
the IT organization’s control, says David Thompson, 
a senior research analyst at Stamford, Conn.-based 
Meta Group Inc. And when it comes to remote ac- 
cess, users are frequently beyond IT’s reach, using 
their personal systems at home or public systems like 
those at Internet cafes or airports. 

In addition to the need to configure the client soft- 
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Clientless VPNs Give 
The Help Desk a Lift 


ware, says Torre, “there are security policy issues 
and access issues you have to keep dealing with.” In 
comparison, Virtual Instant Extranet, an SSL VPN 
appliance from Neoteris Inc. in Mountair View, 
Calif., proved to be fast and simple. “We got Neoteris 
running in less than an hour. Users just go with their 
browser,” Torre says. 

Performance is another potential problem with 
conventional VPNs. “We were running our Cisco 
VPN on a big box, and it was still slow,” says Ward. 
Efforts to tweak the VPN had no affect, and users 
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still couldn’t reach the AS/400. Ward installed Fire- 
Pass from uRoam Corp. in Sunnyvale, Calif., and that 
appliance improved performance while delivering 
access to both e-mail and AS/400 applications. The 
AS/400 applications required a one-time client 
download of an ActiveX component. 

IPsec VPNs establish a network-level connection 
and therefore need to punch through the firewall. 
That’s a problem when remote sites won’t open their 
firewalls, notes Malvin Mize, hosting and access team 
leader at Acxiom Corp., a vendor of information 
management services in Little Rock, Ark. Using the 
SSL VPN capability supported in Tarantella Inc.’s 
thin-client software, however, Acxiom’s remote cus- 
tomers can sit at any Internet-connected device and, 
via their browsers, connect to the company’s Taran- 
tella Enterprise 3 server, which provides secure thin- 
client access to the back-end Windows applications 
Acxiom hosts. There’s no need to open another port 
in the firewall at the customer site, since all traffic 
passes through HTTP Port 80, Mize says. 


The Downside 


“IPsec is the mainstream approach, but it’s not suit- 
able for every remote access situation,” says Jim 
Slaby, an analyst at Giga Information Group Inc. in 
Cambridge, Mass. But although an IPsec VPN in- 
creasingly isn’t necessary for many remote access 
needs, it still has a role in most organizations. “SSL 
solves all the remote access issues except one:” pro- 
viding access to client/server or other applications 
not accessible from a browser, Slaby says. 


Unlike IPsec VPNs, SSL VPN appliances don’t typ- | 


ically allow direct access to network file shares. One 
vendor, Seattle-based Aventail Corp., provides client 
software to access shared files on Windows servers. 
But that requires loading client software and doesn’t 
support Network File System (NFS), which is com- 

monly used on network-attached storage appliances. 

With organizations increasingly Web-enabling 
their client/server and legacy applications, browser- 
only access is less limiting than it once was. But SSL 
VPN and application vendors have also come up 
with other work-arounds, such as 
adding client software or embedding 
proxy capabilities into appliances. 

“Originally, the thinking around SSL 
VPN was to give every application a 
Web front end, but now you can just 
put in a gateway at the edge of the net- 
work,” says Lisa Phifer, vice president 
of Core Competence Inc., a consulting 
firm in Philadelphia. The Web SSL 
session ends at the gateway, which 
then connects to whatever back-end 
application is requested. The gateway 
handles any necessary transformations 
or conversions and presents an appli- 
cation interface to the client. 

On the back-end server side, Meta’s 
Thompson identifies several possible 
gateways. They include Web proxies, 
which may dynamically rewrite Web 
addresses, masking internal addresses 
for security purposes; transactional 
proxies, which translate HTTP for use 
with File Transfer Protocol, SMTP and 
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Anatomy of an SSL VPN 


SSL VPN appliances provide remote access to Web-enabled applications 
and resources without requiring VPN client software to be installed or fire- 


walls to be modified. Clients use only a Web browser, and encrypted HTTPS 
traffic passes transparently through firewalls. Access to client/server appli- 
cations requires a browser plug-in. Some vendors also provide access to file 
shares, but that requires agent software to be installed on the client 
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other applications; Socks-based proxy servers, which 
require client-side ActiveX controls or Java applets 
to enable access to client/server applications; screen 
scrapers, which reformat terminal-session displays 
for Windows or browser clients; and Windows thin- 
client systems, like Fort Lauderdale, Fla.-based Citrix 
Systems Inc.’s MetaFrame and its NFuse front-end 
software for Web browser access. Some functions 
may be embedded in SSL VPN appliances and asso- 


ciated client software, or a separate proxy server may | 


be required. 
Most users need access to a range of 


applications, so vendors have respond- | 


ed by putting different combinations 
of features into their products. Ven- 
dors also differ in the level of product 
manageability offered and in how easi- 


ly their products can tie into an organi- | 


zation’s existing directories for au- 
thentication and authorization. 


With a proxy server, Java or ActiveX | 


client components may be down- 
loaded automatically the first time the 
user accesses the resource. This is 
how remote users typically access 
e-mail with Microsoft Exchange or 
Lotus Notes. On the back end, some 
sort of transactional proxy, such as 
Microsoft’s Outlook Web Access serv- 
er for Exchange Server, may be re- 
quired. And companies that need to 


provide remote users with only e-mail | 


access may find that newer products, 
such as the forthcoming Exchange 


Server 2003, include their own SSL VPN services. 

By using thin-client intermediaries such as NFuse, 
users can access back-end Windows applications. 
Both Tarantella and Citrix also offer their own SSL- 
encrypted remote access options for their thin-client 
products. (Citrix also recently announced its own 
SSL VPN software offering, called Secure Access 
Manager.) But not all companies want the extra com- 
plexity and expense of adding a thin-client layer to 
their IT infrastructures just to allow remote access to 
client/server and Windows applications. 

The SSL VPN market continues to expand as ven- 
dors rush into the space, but the future of many of 
them is questionable, analysts say. “The market will 
coalesce around a few,” says Slaby, who expects large 
network-equipment and IPsec VPN vendors to 
sweep into the SSL VPN market. 

Eventually, SSL VPN functionality may simply be 
incorporated into other network security products. 
“There will be consolidation of the infrastructure at 
some point,” says Thompson, and users may see SSL 
VPN features merge into firewalls, portal gateways 
or other network-edge devices. 

An SSL VPN appliance makes secure remote ac- 
cess easier, but it’s not indispensable. “Much of the 
functionality of remote access can be achieved with 
the use of tools that many organizations already use 
in their customer-facing applications,” Thompson 
says. By using security tools, portals, Web access 
control tools and SSL-enabled applications, some 
companies might avoid buying SSL VPNs altogether. B 


Radding is a freelance writer in Newton, Mass. You can 
reach him at alanradding@attbi.com. 
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DEFINITION 


A weblog, or blog, is a Web site 
where an individual records his 
thoughts and opinions, com- 
ments from others and links to 
other Web resources. A blog 
can be a personal journal or an 
interactive forum. Most are 
public and searchable on the 
Internet. Some companies 
maintain public weblogs as 
communication vehicles for 


employees. 


BY RUSSELL KAY 
IARIES, journals, col- 
umns, essays, musings, 
daybooks, chronicles, 
logs and memoirs — all 

are ways in which people have 

kept records of their thoughts 
and feelings as well as events 
taking place around them. 

In our computer-literate, 
information-based society, the 
creation of an electronic 
equivalent of these personal 
journals was inevitable. It’s 
called the weblog, often ab- 
breviated to blog, and it has 
expanded the possibilities for 
comment, expressing opinion 
and public discourse. 





Traditional diaries come 
with lockable straps designed 


| to keep others from reading 


one’s private thoughts. In to- 
day’s world, however, atti- 
tudes toward such privacy 
seem, on the whole, quite dif- 
ferent than they used to be. 
Weblogging represents a dis- 
tinct movement to share 


| thoughts publicly. 


Early weblogger and devel- 


| oper Dave Winer (www. 
| scripting.com) says weblogs 


have the following character- 
istics, which he sums up in the 
phrase “personal Web-based 
publishing communities”: 

@ Personal. Blogs are created 
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by a single person, expressing 
a distinct personality. 

@ Web-based. They’re fre- 
quently updated, inexpensive 
to maintain and accessible via 
a Web browser. 

@ Published. Automated pub- 
lishing tools help the author 
present his words in an attrac- 
tive format, and maybe even 
syndicate them. 

= Communities. Blogs link 
to other blogs and sites, ac- 
knowledging that they’re part 
of a larger world. 

One other category of web- 
log is a community blog, 
which is generally updated 
frequently by many people 
and often has an imposing 
presence. The best-known and 
perhaps earliest example of 
this type is www.slashdot.com, 
a good site for news and 
sometimes offbeat commen- 
tary on Linux, open source, 
gadgets, privacy and other 
computer-related topics. 

Weblogging has 
been around as a dis- 
tinct form of commu- 
nication since the 
1990s. By one account, 
the first bloglike page, 
with personal comments and 


| links, was Marc Andreesen’s 


“What’s New” page for NCSA 
Mosaic in June 1993 (http:/ 
archive.ncsa.uiuc.edu/SDG/ 
Software/Mosaic/Docs/old- 
whats-new/whats-new-0693. 
html). 

Jorn Barger coined the term 
weblog in December 1997 for 
his “Robot Wisdom Weblog” 
(www.robotwisdom.com), and 
in 1999 the shortened form, 
blog, appeared. 

At the beginning of 1999, the 
best-known list counted 23 
weblogs in existence, though 
there were certainly others. In 
early January 2003, Pyra Labs 


|; in San Francisco reported over 


1 million registered users of 
Blogger, its free software and 
hosting site. (One month later, 


| Google Inc. bought Pyra.) 


The Impact of Blogging 
Most webloggers seem to be 
avid readers of other blogs 
and maintain links to them on 
their own weblog pages. Many 
Web sites exist just to aggre- 
gate links to blogs, often on a 
geographic or topical basis, 
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and many weblogs are mem- 
bers of Web rings — linked 
sets of Web sites that provide 
navigation to one another. Sur- 
prisingly, many webloggers 
don’t seem much concerned 
with computers except as a 
simple tool. 

To understand the power of 
the blogging community, pon- 


| der what some consider racist 
comments made by Sen. Trent 


Lott about retiring Sen. Strom 
Thurmond and reported by 
ABCNews.com last year. The 
first people to comment on 
the situation were a couple of 
politically minded pundits 
who discussed it at length in 
their blogs over a weekend. 
The issue spread quickly in 
the blogging community until 
the national news media was 
forced to examine Lott’s re- 
marks and history. The result 
was Lott’s resignation as ma- 
jority leader of the U.S. Senate. 
It’s also hard to overestimate 
the importance of per- 
sonal narratives and 
statements in record- 
ing history. From 
Samuel Pepys’ notes 
on life in 17th century 
England to Anne Frank’s diary 


| about her experiences in World 
| War II Amsterdam, records 
| of private experiences and 


thoughts are crucial to under- 
standing the cultures and times 


| in which they were written. 


PR Move 


A recent development is the 
use of public weblogs as vehi- 
cles for business communica- 
tions. In his own blog, Dan 
Bricklin, author of VisiCalc 
and founder of Trellix Corp. in 
Cambridge, Mass., comments 
on the usefulness of public 
blogs: “A normal part of the 
job of many consultants en- 
tails going to meetings and 
conferences and being active 
in trade associations where 
they ‘network,’ show off their 
expertise, appear on panels, 
etc. A blog is a way of showing 
your expertise and establish- 
ing yourself as a trustworthy 
authority without doing the 
travel. ... (A blog is an excel- 
lent way to build up your ‘au- 
thority’ and move up political- 
ly in a trade association, too. 
Your readers would be others 





www.computerworld.com 


Software Tools 
For Blogging 


Blogger 

www.blogger.com 
WebCrimson 
www.webcrimson.com 

Radio UserLand 
http://radio.userland.com/ 
Blosxom 
www.raelity.org/apps/blosxom 
(A complete blogging applica- 
tion in 61 lines of Perl.) 
CityDesk (for Windows) 
www.fogcreek.com/CityDesk 


Tinderbox (for Macintosh) 
www.eastgate.corn/Tinderbox 


Movable Type 
www.movabletype.org 


BigBlogTool 
www.bigblogtool.com 


in your field, not customers.)” 
For example, in January, 
Jupiter Research, an arm of 
Jupitermedia Corp. in Darien, 
Conn., started posting its ana- 
lysts’ weblogs, hosted from a 
common page (weblogs. 
jupiterresearch.com). 


Starting Your Own 
Probably the easiest way to 
start a weblog of your own is 
to go to Pyra’s site at www. 
blogger.com and sign up. The 
site will lead you through the 
necessary steps to set up your 
weblog. Blogger doesn’t 
charge for its basic service un- 
less you want your own do- 
main name, but it does offer 
upgraded services at a price. 
Other sites offering similar 
services (not tested by the au- 
thor) include www.pitas.com 
and www.diaryland.com. B 
Kay is aComputerworld 
contributing writer in Worces- 
ter, Mass. Contact him at 
russkay@charter.net. 


BLOGS WORTH READING 


For a list of blogs that you might find 
interesting, visit our Web site: 


QuickLink 37759 
www.computerworld.com 


Are there technologies or issues you'd like 
to learn about in QuickStudy? Send your 
ideas to quickstudy@computerworld.com 


To find a complete archive of our 
QuickStudies, go online to 
@ computerworld.com/quickstudies 
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Merger Security Hinges 
Appliance 


On Gateway 


The best short-term fix for handling 
acquisitions may be to use an integrated 
security product. By Mathias Thurman 


| the acquired company to con- 


UR COMPANY is fre 

quently involved in 

mergers and acquisi- 

tions, and we typically 
don’t know the security pos- 
ture and integrity of the IT 
rcsources in the company 
we're acquiring. 

In the past, rather than con- 
ducting an upfront security au- 
dit, we simply opened the 
floodgates to allow network 
traffic to flow from 
the acquired company 
into our trusted envi- 
ronment. In one case, 
that allowed a virus to 
propagate through 
several parts of our 
network, requiring 
many hours of cleanup. 

A security audit could have 
prevented that. But unless an 
upfront audit is written into 
the acquisition agreement, it 
can’t be started until after the 
merger or acquisition is com- 
pleted. Many target companies 
resist such upfront agree- 
ments, however, fearing the 
loss of sensitive information if 
the deal doesn’t go through. 

But that’s not the worst of it. 
Once the acquisition deal is 
signed, the executive staff is in 
such a rush to integrate the 
companies that security as- 
sessments typically take a 
back seat to bottom-line prof- 
itability concerns. 


Fear of the Unknown 


It’s difficult to determine the 


figure its servers to set up 


| trust relationships with ours. 


The most important goals are 


| to give new employees access 


to our e-mail, human re- 


| sources applications, company 
| intranet and a few other criti- 


cal applications. If the com- 


| pany we are acquiring sells a 


SECURITY 
MANAGER'S 
JOURNAL & 


—- 


| software product, its engineer- 
| ing team also needs access to 


our source code — 
our company’s bread 
and butter. 

What we fear 
most is that the 
newly introduced 
resources may be 
infected with a 


| virus. It’s also possible that the 
| other company’s servers don’t 
| meet our security configura- 

| tion requirements and are vul- 


nerable to an attack, or have 
already been compromised. 
I’ve seen incidents where 
the e-mail server at the ac- 
quired company had been 
fully compromised when 


| someone added a packet-sniff- 
| ing device to the network. The 


company had contracted out 


| the installation and configura- 
| tion of its e-mail server, and 


integrity of another company’s 


infrastructure prior to estab- 
lishing a trust environment 
between our environment 

and theirs. Here’s what usually 
happens: The network team 
configures a dedicated circuit 
to the acquired company, 
throws up a firewall and asks 


We need a security 
gateway product that 
can act as an interim 
measure . . . mitigat- 
ing the most common 

problems we might 
encounter during an 

acquisition. 





no one on staff was capable of 


| managing the resource. The 
server was never maintained 
properly, so the packet sniffer 
went unnoticed for more than 
three months. 

We need a security gateway 


| product that can act as an in- 


terim measure until a full as- 
sessment can be completed, 
mitigating the most common 


| problems we might encounter 
| during an acquisition. We want 


something that offers good 
protection at a low cost and 
with few hardware require- 
ments. The product must also 
be easy to manage. 

We have other requirements 
as well. In the past, each com- 
pany that we’ve acquired has 
had fewer than 200 employ- 
ees and used minimal band- 
width. This is important, be- 
cause any gateway product 
must be able to cope with ex- 
pected traffic levels. 


Symantec Gets the Nod 
After a search, we selected the 
Symantec Gateway Security 
appliance from Symantec 
Corp. in Cupertino, Calif. This 
appliance combines virus pro- 
tection, Internet content filter- 
ing, a virtual private network 


| and an intrusion-detection sys- 


tem in one box. 

We planned to buy several 
appliances and preconfigure 
them for easy and rapid de- 
ployment. We planned to use 
them only until we had vali- 
dated the integrity of an ac- 
quired company’s infrastruc- 
ture. Then we would remove 
them, apply our current stan- 
dards and put the gateway 
aside until the next acquisi- 
tion. But our plan ran into op- 
position from the network 
group, which is responsible 
for the day-to-day manage- 
ment and configuration of our 
firewalls. 

The network team currently 
manages Cisco Pix firewalls 


| with Mountain View, Calif.- 

| based Solsoft Inc.’s centralized 
| management software, Solsoft 
| NP, and they were uncomfort- 
| able introducing another 
firewall product — especially 
if they had to manage it. Do- 

| ing so would mean additional 
| training, familiarity with the 

| product, support issues and 

| extensive lab testing, the team 
| complained. Like other de- 
partments within our com- 
pany, the network group is 

| already spread thin. 

I explained that Solsoft 
NP may be able to manage 
the Symantec appliance’s fire- 
wall component. This would 
mean that the network team 
wouldn’t need to be intimate 
with the syntax or configura- 
tion of the access lists for the 
gateway device. 

But they stood firm: They 
| absolutely didn’t want to 
manage any aspect of the fire- 
wall portion of the Symantec 
gateway. Instead, they sug- 
gested, why not use some of 
the extra Pix products they 
had lying around? These 
could work as an interim so- 
lution. But we'd still need the 
Symantec appliance for the 
other security functions. 

We may end up not using 
the firewall portion of the 
Symantec product. But at 
this point, we'll get an evalua- 
tion unit in. Once we start lab 
testing, we'll have a better un- 
derstanding of just how diffi- 
| cult the administration of the 
firewall is before making a 
final decision. D 


_ WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “Mathias Thurman,” 
whose name and employer have been 
disguised for obvious reasons. Contact him 
at mathias_thurman@yahoo.com, or join the 
discussion in our forum 


QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 
| @computerworld.com/secjournal 
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netForensics 3.0 


@ netForensics Inc. 

= Edison, N.J. 

= www.netforensics.com 

= Pricing starts at about 
- 000 


luse netForensics’ event cor- 
relation and risk assessment 
tool to collect security-related 
data from our intrusion-detec- 
tion systems, network switch- 
es, routers and firewalls. Re- 
cently we upgraded to Version 
3, which gives the netForen- 
sics graphical user interface a 
face-lift (see photo). The initial 
setup was quite lengthy, and it 
still takes some time to tweak 
the installation for maximum 
effectiveness. Nonetheless, 
the new Security Information 
Management desktop is more 
intuitive and easier to use than 
the previous one. 

~ Mathias Thurman 


SonicWail 
Firewall Debuts 


SonicWall Inc. announced 
SOHO TZW, a combined fire- 
wall and IPsec virtual private 
network security appliance 
that supports both wired and 
802.11b wireless clients. 
According to the Sunnyvale, 
Calif.-based vendor, the basic 
system, which supports 25 
users, sells for $895. 


Sun, Symantec 
Launch Appliance 
Sun Microsystems Inc. and 
Symantec Corp. are releasing 
a“no-hassles” IDS appliance. 
The iForce IDS Appliance is a 
1U (one U equals 1.75 in.) 
rack-mounted appliance 
based on Sun’s LX50 Solaris 
server and Symantec’s Man- 
Hunt intrusion-detection soft- 
ware. The appliance, which 
ships this month, costs 
$21,995. 
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GET ALONG? 


Imagine 
no compatibility issues, 
no. conflicts. 


Like anti IP-based enterprise networks and their 
applications should rely an each other. But living 
under the same roof doesn’t guarantee harmony. 
And that discord comes at a high cost. F5 products 
bring everyone into perfect 
na ek agreement by creating a 
anime ALSO folie or-|tn ele l ee) Ae 
applications, WAN links, > 


.data centers, security devices and more to intelli- 


gently deliver information over any IP network. 


When. everyone is working together, you'll 
achieve the high availability performance you 
need, combined with an efficient, secure network 
infrastructure that ensures the reliable delivery of 
Internet traffic, applications or Web services— 

all at a cost you can afford: 


Imagine harmony that produces world-class __ 
performance. To learn how, download our free 
guide, "Delivering secure, predictable and cost- 
effective applications” at www.f5.com/atmew. 
Or-call 800-916-7158. 
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Enterasys Switch 
Line Announced 


Andover, Mass.-based Enterasys 
Networks Inc. announced last 
week the Matrix N-Series line 

of switches for enterprise cus- 
tomers. The Matrix N3 and Matrix 
N7 switches have the ability to 
reach 1.68Tbit/sec. throughput 
and will begin shipping in May. 
Pricing wasn’t disclosed. 


SGI Launches 


Midrange Servers 


Silicon Graphics Inc. in Mountain 
View, Calif., unveiled its new Ori- 
gin 350 midrange technical server 
series. The modular, rack-mount- 
ed servers include global shared- 
memory architecture and can be 
equipped with two to 32 CPUs 
and up to 64GB of memory. An 
entry-level configuration with two 


CPUs and 1GB of memory sells for | 


$23,790. The Origin 350 series is 
available now. 


Opera Adds Web 
Navigation Tools 


Version 7.10 of the Opera for Win- 
dows Web browser and the beta 
version of Opera 7.10 for Linux 
feature fast-forward and rewind 
functions. Oslo-based Opera Soft- 
ware ASA said they are the first 
browsers with buttons for speed- 
ing up Web navigation. The 
browsers can be downloaded 

for free at www.opera.com, or 
banner-free versions can be pur- 
chased starting at $39. 


QLogic Rolls Out 


Multiport Switch 


QLogic Corp. in Aliso Viejo, Calif., 
announced a new high-port-count 
Fibre Channel edge switch with 
4Gbit/sec. throughput. The SAN- 
box2-64 is aimed at the storage 
network middle ground between 
bladed directors and fixed-port 
edge switches. The scalable, 
modular bladed switch can be 
equipped with eight to 64 Fibre 
Channel ports and costs $1,000 
per port. 
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IT Pulls a Hat Trick 


OST IT PROFESSIONALS are used to the 

idea of wearing many hats, as tight bud- 

gets and lean staffing have forced them to 

take on more than one role within their 
departments. Now, technology changes are blurring 
the roles between IT and external groups as well. 


A broad, cross-industry 
convergence on a single set 
of communications tech- 
nologies is becoming the 
new common denominator 
across what were formerly 
disparate corporate job 
functions. Mass adoption of 
TCP/IP and Ethernet across 
disciplines could soon begin 
to erode departmental barri- 
ers and redefine what is and 
is not an IT function. Turf 
wars are likely to erupt. And 
before it’s over, IT managers 
may feel as though they’ve tried on 
more hats than the Village People. 
The question is, as everything con- 
verges onto a common network archi- 
tecture, how should that architecture 
be designed, how should it be managed, 
and who should have responsibility for 
the disparate systems that use it? 
Consider building-automation sys- 
tems. From heating and ventilation to 
surveillance and elevator monitoring, 
building automation will undergo a 
major transition to TCP/IP and Ether- 
net over the next 10 years. Traditional 
use of expensive, proprietary cabling 
systems, communications protocols 
and specialized converter boxes will 
give way to a common, structured ca- 
ble plant and network infrastructure. 
The convergence of automated build- 
ing-monitoring and control systems 
onto a single communications medium 
has implications that even those in the 
industry have yet to fully grasp. New 
applications are likely to emerge that 
will offer unprecedented integration 
— as soon as someone thinks of them. 
And with the ratification this sum- 
mer of the emerging Power-over- 
Ethernet standard, the local wiring 





closet will gradually evolve 
into a universal distribution 
system for low-power de- 
vices, ranging from secu- 
rity-card readers to IP sur- 
veillance cameras and even 
emergency backup lighting, 
time-card readers and wall 
clocks. Each will be re- 
motely configurable and 
will feed back status infor- 
mation over Ethernet. 

But with Ethernet fully 
democratized, who will 
control the infrastructure? 

You could create parallel, separately 
managed networks. But IT has more 
experience managing IP-based data 
networks, and sooner or later, some- 
one is going to want to cross the IT 
and building-automation systems’ data 
streams. For example, analysts say IT 
security is likely to merge with build- 
ing-security systems over the next few 
years in order to provide a more com- 
prehensive security picture. 
Meanwhile, wireless LANs are fol- 


| lowing PDAs through the corporate 
back door, and departmental managers | 


have begun acting like network man- 


| agers, installing WLAN access points 


in a grass-roots effort to give mobile 
office workers access to the corporate 
LAN. Do you issue cease-and-desist 
orders and hope for the best, or do 
you take charge, set WLAN policy and 
begin your own deployment? Doing 
the latter means managing data over 
radio waves in an unlicensed spectrum 
that spills over business boundaries, 
is prone to security problems and 
doesn’t like the office microwave. 
WLANs also present a new learning 
curve in how to manage and trou- 
bleshoot a network that uses airwaves 





as its communications medium. Greg 
Murphy, president of WLAN manage- 
ment software vendor AirWave Wire- 
less Inc., says a hospital’s IT team 
called recently when WLAN perfor- 
mance began dropping off at regular 


| 
intervals. AirWave traced the problem 


to a balloon vendor. With each deliv- 
ery, the metallic-covered Mylar bal- 
loons floated upward, blocking an 
access point in the lobby. 

WLANs clearly need to be managed 
by IT. Once IT assumes control, how- 
ever, users will expect the same level 
of service they get on the wired net- 
work. Early management products can 
help by providing centralized configu- 
ration management and performance 
monitoring, but they also must be inte- 
grated with existing enterprise net- 
work management systems for end-to- 
end troubleshooting. 

The voice/data divide is another de- 
partmental boundary that’s falling fast 
IP telephony is turning the Ethernet 
LAN into a giant telephone switch, 
with IP phones plugged into Ethernet 
jacks and traditional PBX functions 
like call management and voice mail 
running on network servers. As if that 
wasn’t enough, WLAN IP phones are 
on the way. 

In taking on traditional telecommu- 
nications department functions, IT 
must serve a constituency that has 
high expectations for signal quality, 
uptime and sophisticated feature sets. 
Suddenly, data networking staff need 
to understand the impact of issues like 
jitter, latency and packet prioritiza- 
tion, while the telecommunications 
folks bone up on TCP/IP. Do you 
merge these groups — or somehow 
move the boundary between them? 

How such issues get resolved is 
likely to redefine IT’s role in the orga- 
nization. As an IT manager, you should 
take the initiative to drive that proc- 
ess before some other group does it 
for you. D 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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for Control Freaks. 


Control 2 to 512 PCs or servers from a single keyboard, 
monitor and mouse console with Tripp Lite KVM Switches! 


Take TOTAL CONTROL with 
Tripp Lite KVM Switches! Not only 
will you be able to manage every 


computer on your network, you'll 


Tripp Lite’s 8-port rackmount KVM Switch is full featured yet economically priced. 
also SAVE VALUABLE TIME. ; : 
¢ All metal housing—occupies only 1U of rack space 


MONEY AND SPACE. e Simple "plug-and-play" setup requires no software configuration 
e "Always-on" technology eliminates need for external power source 
SE ES SS RS ¢ Individual port selection buttons allow for faster CPU selection without scrolling 
in hardware and electricity costs, © On-screen display provides simplified menu-driven management 
¢ Compatible with PS/2, AT*, USB*, Mac* or SUN* systems 


eliminate unnecessary clutter packtop models also available in 2 and 4-port configurations 


and improve productivity by 


FREE 4-Port KVM Switch! 


avoiding unnecessary movement : ; ; 
J y Register online for a chance to win a FREE 4-port KVM Switch. 


between consoles. Visit www.tripplite.com/promo/cw 


TRIPP-LITE = 
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www.tripplite.com 
yur single source for power protection 1111 W. 35th Street, Chicago, IL 60609 (773) 869-1234 


d connectivity products. 





Products. People. 


Problems solved. 


From servers to service, Dell has the solution. 


Call: M-F 7a-8p Sat 8a-5p, CT 


Dell | Small and Medium Business 


Your business has unique needs. |t deserves a unique solution. From PowerEdge” servers featuring Intel® Xeon™ processors to 
PowerVault™ Storage and PowerConnect” Network Switches, we offer tailored solutions to meet your business needs. And of course 
it’s Dell, so you know you're getting the latest technology. But that's only half of the story. Dell offers consulting services that range 
from deployment and installation to training and certification. All from one source. And everything is backed by thousands of service 
and support people at your beck and call, on-site, online and on the phone. Suddenly your IT infrastructure doesn’t seem so daunting 


Let Dell's one-of-a-kind solutions put you on the path to one-of-a-kind success 


Dell Rated #1 in Intel-Based Server Satisfaction 
Technology Business Research 

Corporate IT Buying Behavior and Customer Satisfaction Study 

Third Quarter 2002 

— December 2002 





Remote Office & File/Print Sharing 


PowerEdge™ 600SC Server 


Entry-Level Server with Performance Features 


w as $18/mo, (46 pts 
E-VALUE Code: 17256-$20406c 


For a complete server solution we recommend these additions: 
© PowerConnect 2016 16-Port Ethernet Switch, add $99 
© PV100T-TR5 Internal Tape Back-Up, add $199 


Cheer, 
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OOOOH 


Web Server Database 


PowerEdge™ 1650 Server PowerEdge™ 2650 Server 


mae Available 1U Rack- veavenees Server 2U Scalable Rack Server with High Processing Power 


$1299: w as $35/mo., (46 pmt $1799:: w as $49/mo.. (46 pmt 
E-VALUE Code: 17256-$20412c E-VALUE Code: 17256-20417 


For a complete server solution we recommend these additions: For a complete server solution we recommend these additions: 
© PowerConnect 3024* Managed 24+2GB Switch, add $549 * PowerConnect 3248* Managed 48+2GB Switch, add $999 
* Custom-install Site Survey, add $199  PowerVault 112T-DDS4 (Dual Drive Capable) 

Tape Back-Up, add $1499 


The answers you need. Easy as DLL 


Click www.dell.com/bizsolutions Call 1-877-292-3355 
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Nortel Networks, we call this "the engaged business model’ And we make it 
possible by enabling business to engage their customers through delivering 
critical, time-sensitive information on whatever device they prefer. Before they 
even know they need it. So businesses can win the loyalty necessary to build a 
solid revenue base. Leveraging solutions like contact centers and application- 
aware switching. Insuring user mobility and network continuity. Accelerating 
productivity while lowering costs. The results: customers like William become 
customers for life. All delivered by our Enterprise vision. One network. A world 


of choice. nortelnetworks.com/onenetwork 


NORTEL 
NETWORKS 
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STEAL THIS IDEA Q&A OPINION 
And the Winner Is .. . E-Business So Far |. <4@— Magna Cum Unemployed 


Southern California Edison CIO . In their new book on e-business, two | X 2 With companies like Microsoft and GE 
Mahvash Yazdi says the utility has authors from the Wharton School i setting up IT shops overseas and the 
launched an awards program to ; analyze why some Internet ventures ; dl economy slowing, IT professionals are 
recognize IT excellence beyond the were profitable while others failed. : watching job opportunities fade away, 
walls of the IT department. Page 44 Page 46 writes columnist Donald Finley. Page 48 





IT WORKFORCE — Mtb oS 
If you are a programmer or an 
application developer, or work 
on the IT help desk or in data 
center operations, your IT job 

is in jeopardy, and here’s why. 

In an unrelenting push to lower IT costs, more and 
more companies are tapping cheaper offshore labor 
to handle routine tasks such as application mainte- 
nance and help desk support functions. Even compa- 
nies that farm out IT work under pay-as-you-go and 
other hosted computing models to U.S. outsourcers 
— such as IBM and Hewlett-Packard Co. — are con- 
tributing to the loss of jobs, because these domestic 
service providers are also shipping IT work abroad. 
IBM Global Services, for example, is India’s fifth- 
largest employer. 

By 2015, 3.3 million white-collar jobs — 472,632 of 
them in IT and mathematics — and $136 billion in 
wages are expected to move offshore to countries 
like Russia, India, China and the Philippines, accord- 
ing to a November 2002 report by Forrester Research 
Inc. analyst John C. McCarthy. 

In March, 212,000 U.S. computer and mathematical 
professionals were unemployed, according to the 
U.S. Bureau of Labor Statistics. Looking ahead, Meta 
Group Inc. analyst Maria Schafer predicts that up to 
50% of U.S. IT employees could shift to contract 
work by 2007, as outsourcing in all forms continues 

Continued on page 40 
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Yours could very well G 

be the next one to go offshore. 

By Thomas Hoffman and 

Patrick Thibodeau 
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Exporting IT 


Continued from page 39 JOB 


to increase and as more salaried U.S. IT employees 
opt to work as contractors to take advantage of the 

flexible schedules and the opportunity to work ona 
variety of projects. 

Some industry experts draw an analogy between 
the thousands of U.S. manufacturing jobs that were 
sent overseas 20 to 30 years ago and the impact that 
offshore outsourcing is now having on U.S. IT jobs. 
Still, there are subtle but important differences be- 
tween the two. Among them is that the forces behind 
the shrinking IT workforce go beyond companies 
seeking lower costs. IT managers are also struggling 
to strike a balance between the skills they want to 
have in-house on salary and the talent they can con- 
tract for on an as-needed basis. 

“It’s not just about low cost. CIOs are interested in 
specialization and reliability,” says Mark Hauser, 
CEO of Cap Gemini Ernst & Young’s Americas divi- 
sion. Going forward, CIOs say they want a different 
mix of skills. They want their salaried IT employees 
to include experienced project managers and busi- 
ness/IT liaisons who can effectively communicate 
and broker IT project requirements between busi- 
ness units and IT departments. 


Packaged Software Improving 


Another factor contributing to IT job loss in the U.S. 
is companies’ growing preference for a buy-vs.-build 
approach to software development. Purchasing soft- 
ware means that fewer in-house programmers and 
developers are required than when systems are cre- 
ated from scratch — even when a fair amount of cus- 


The New IT Worker: 
Angry and Proactive 


WHEN IT SPECIALIST JIM MANG! decided to help form 
a union at IBM in 1999 after the company changed its 
pension plan, the worst part was telling his father, a Big 
Blue retiree. “What's he going to think? What's he going 
to say to his son... who is going to start union organiz- 
ing?” Mangi recalls. But as it turned out, his father was 
all for it. “He knows it’s just not what it was,” says Mangi, 
secretary of Alliance@IBM, which is affiliated with the 
Communications Workers of America (CWA). 

Many high-tech workers are feeling under siege, and 
Mangi is among those who are fighting back. Job losses 
from the dot-com bust, benefits cutbacks, offshore de- 
velopment and foreign workers brought in on H-1B visas 
are fueling activism, lobbying and education efforts. 

Much of what union organizers do is educate IT work- 
ers, who largely remain reluctant to join unions. Indeed, 
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tomization is done to the off-the-shelf software. So- 
phisticated software development techniques and 
improved global bandwidth and communications are 
making it possible for companies to have various 
pieces of development or integration projects con- 
ducted in India or China, with the final assembly 
completed in the U.S. That’s why there will continue 
to be demand for superdevelopers and top-notch in- 
tegration experts who are adept at managing and co- 
ordinating different phases of a development project 
and pulling together the various components into a 


| cohesive package. 


the CWA, which represents about 700,000 workers in technical 
areas, estimates that only about 5,000 of its members are in IT. 

Mangi lets employees know when IBM is hiring H-1B visa 
holders by posting on a Web site copies of the federal form that 
employers must file when hiring workers from overseas. He says 
he does it to make people aware that even though IBM may be 
going through layoffs in the U.S., the company may also be ap- 
plying to hire foreign laborers. 

“It's a turning point in this industry,” says 
Marcus Courtney, president of the Seattle- 
based Washington Alliance of Technology 
Workers, a high-tech workers’ union that’s 
also affiliated with the CWA. Offshore out- 
sourcing and increased use of foreign work- 
ers are practices that were inconceivable in 
the 1990s, he says. 

“To sell this workforce out after they 
helped create one of the most successful 
economies in the world - that should not be 
an agenda that workers need to embrace,” 
Courtney adds. 
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“If you buy the argument that a lot of IT has be- 
come commoditized, [then] we are becoming inven- 
tors, creators, integrators and architects, and we are 
going to send the production offshore,” says Steve 
Andriole, a senior consultant at Arlington, Mass.- 
based Cutter Consortium and an MIS professor at 
Villanova University in Villanova, Pa. Under this sce- 
nario, argues Andriole, U.S. IT organizations will 
continue to partner with business units to conceptu- 
alize IT approaches to business challenges and exe- 
cute on those projects domestically — even if part of 
the project development itself is conducted overseas. 


A legislative offensive is beginning to build at the state level. 
A bill pending in the Washington Statehouse would require 
employers to give employees at least 60 days notice of a layoff 
of 50 or more employees. And a New Jersey lawmaker wants 
state contracts to prohibit offshore work. 

The offshore trend can be compared to the overseas job 
exodus in manufacturing. The loss of relatively well-paying, 
blue-collar jobs hurt that segment of the 
workforce, and real wages for the bottom 
25% of the workforce never recovered, says 
Josh Bivens, an economist at the Economic 
Policy Institute in Washington. 

Dave Cooper, former CiO at Lawrence Liv- 
ermore National Laboratory, a U.S. nuclear 
weapons lab, says the social costs of off- 
shore development will exceed the corporate 
bottom-line benefits. Offshore work will dis- 
courage young people from studying IT in 
college, Cooper argues. What has “kept this 
country strong, both financially and physical- 
ly, is the fact that we have been able to devel- 


and plan 
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Survivin 
Offshore Cutbacks 


JIM HONERKAMP, CIO AT CLOPAY CORP., a building prod- 
ucts maker in Mason, Ohio, is one of the people shaping the 
future of the American IT workforce. 

By shipping some of the company’s IT programming and 
application development work to India, Honerkamp has re- 
duced Clopay’s IT staff from 90 people, including consul- 
tants, to 35. He has no regrets about this decision. Out- 
sourcing many IT functions has kept his budget stable and 
allowed him to add services. The decision to outsource net- 
work management, for instance, let him add network moni- 
toring and other services for the same price. 

Outsourcing is a necessity, Honerkamp says. “You really 
don’t have much choice. | don’t see how we can justify $90 
to $130 an hour,” when offshore services charge a third of 
those hourly rates. “I think the generic programmer [in the 
U.S.] is really threatened by this,” he says. 

Indeed, the U.S. IT jobs most adversely affected by off- 


To that end, more than a dozen CIOs at Fortune 
1,000 companies and many other IT leaders at large 
IT organizations who were interviewed for this re- 
port say the IT worker they’re looking for is some- 
one who combines business savvy and broad tech- 
nology acumen. 

“We're trying to preserve the internal knowledge 
that’s important to the business while leveraging 
lower labor rates and technological sophistication in 
different geographies,” says Harriet Edelman, senior 
vice president and CIO at Avon Products Inc. in New 
York. The $6 billion beauty products company is in 


® Many ClOs will investigate or pursue IT offshore 
outsourcing this year for three reasons: cost savings, 
access to specific skills and a general sentiment that 
internal staff can’t be trained quickly or effectively in 
new skills. 


@{T and business leaders who outsource develop- 
ment, support and services must redirect their em- 
ployees to critical roles such as leadership, architec- 


op these technologies and lead the rest of the world,” he says. 
“If we no longer have U.S. citizens who are willing to [study IT in 
college], it's going to hurt us socially in an economic sense.” 
But Steve Andriole, a senior consultant at Cutter Consortium, 
and an MIS professor at Villanova University, says the U.S. will 
still be the place where technology ideas are born. “I think the 
risks are lower that we will lose our core competencies,” he 
says. And that has to do with the volatility and rapid pace of 
change of technology, which sees new developments every two 


shore outsourcing are programming-related. IT professionals 
involved in integration work on business-process projects or 
those who have new technology skills have the best chance 
of surviving. s 

The U.S IT professionals who are most in demand often 
have specific industry or software package skills, such as 
those used in health care or SAP and PeopleSoft systems, 
said Russ Tessman, a manager at Vermillion Group/MRI, an 
IT recruiting company in Des Moines, lowa. But profession- 
als with general skills such as Java development and Visuai 


But this career advice is based on the kinds of services 
being provided offshore today, not tomorrow. The future for 
U.S. IT professionals may get worse. 

Advanced networking and storage technologies are work- 
ing to turn IT into a utility, something that can be managed 
anywhere, anyplace, says Andre Mendes, chief technology 
integration officer at Public Broadcasting Service in Alexan- 
dria, Va. 

“The truth is that as we continue to progress, the cost of 
providing a secure environment for a company is going to be 


Basic programming - “those are the guys really 
struggling to find new opportunities,” he says. 

There's also a need for qualified project 
managers, especially people who know how to 
bring projects in on time, notes Marty Clague, 
president and CEO of Farmington Hills, Mich.- 
based Covansys Corp., which provides offshore 
IT services in India. IT workers with communi- 
cations technology and networking skills are 
also needed in the U.S., according to Clague. 
There aren't enough people who understand 
networks, how to run them, build them and 
protect them, he says. 


LY 


the early stages of creating its own network of re- 
gional development centers. It began by establishing 


| 
| Link 37761). 

Global Exchange Services Inc. (GXS), a Gaithers- 
burg, Md.-based spin-off of General Electric Co. that 
provides transaction management services to more 
than 60,000 retailers worldwide, pays about $30 per 

| hour for programming work in its company-operated 
| offshore centers in India and the Philippines [Quick- 
Link 37522]. In the U.S., GXS’s total hourly program- 

mer cost is $110 to $120. 


ture, business analysis, business enhancement, proj- 
ect management and vendor management. 

® Discontinuity in IT jobs, skills and support roles will 
create upheavals in compensation, rewards and in- 
centives at some companies. The ones that move cau- 
tiously and respectfully will keep performance high 
and defuse employee anger. 


SOURCE: GARTNER INC 


to three years, vs. 10 to 15 years in manufacturing. 
“Technological innovation is still largely U.S.-centric,” 
he says. “In manufacturing, it's not.” 
- Patrick Thibodeau and Thomas Hoffman 


SAVING JOBS, RAISING COSTS 


Protecting IT and other state jobs raises costs in New Jersey: 


QuickLink 37913 
www.computerworld.com 
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cessity at Clopay. 





too large,” says Mendes. “There are going to be too 
many variables, too many unknowns, and at what 
point do you say, ‘No, | want a company that does 
this for a living to worry about these things on a 
24/T basis.’ ” 

With backbone networks operating at almost 
zero latency worldwide, there’s nothing to stop the 
heart of a corporate IT department - its data center 
- from being moved offshore, Mendes says. “If 
communication links are not only ubiquitous but 
extremely reliable, then what difference does it 
make if it’s down the block or around the country?” 

- Patrick Thibodeau and Thomas Hoffman 


The economics give companies little choice but to 


| export programming work, especially for software 
a Web development hub in Hungary last year [Quick- | 
| also exporting application development and infra- 


maintenance and support. But increasingly, they’re 


structure support work, says Rita Terdiman, an ana- 


lyst at Stamford, Conn.-based Gartner Inc. 


“You have to do it, otherwise the competition is 


| doing it for you,” said Tasos Tsolakis, GXS vice presi- 


dent of global technology. 


| Workers Find Comfort in Groups 

| On the IT employee side, the offshore movement is 

| changing workers’ attitudes toward their employers. 

| To protect their livelihoods, programmers and others 
| are embracing strategies more common among blue- 
| collar workers. These include joining unions and 


lobbying legislators. “Every day you go to work, you 


| don’t know if you are going to have a job that day,” 


says Linda Guyer, president of Alliance@IBM, an En- 


| dicott, N-Y.-based union of roughly 5,000 IBM work- 


ers. “You don’t know whether you are going to be re- 
quired to train your replacement” from India (see 


| “The New IT Worker: Angry and Proactive”). 


The union was formed in 1999, when IBM made 
unpopular changes to workers’ pension plans. Today, 
the union continues to play mostly an educational 


and informational role. For example, it lets employ- 


ees know when IBM is hiring H-1B visa holders by 

posting on a Web site copies of the federal form that 

employers must file when hiring overseas workers. 
Even though it has no bargaining rights, the union 


says it can still exert pressure as a voice of influence. 


“We’re small, but we think we carry a lot of weight. 
The executives are aware we exist, and I think we are 


| avery effective pressure point,” Guyer says. 


Some IT executives say they have no choice but to 
outsource. Sue Unger, senior vice president and CIO 
at DaimlerChrysler AG, says her company last year 
began to outsource maintenance for 150 core applica- 
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tions that support its engineering, manufacturing | 
and sales activities to Infosys Technologies Ltd. 

and Syntel Inc., both in India. The move allowed 
DaimlerChrysler to cut loose high-priced U.S.-based 
consultants who were used for strategic projects and 
replace them with 100 DaimlerChrysler IT staffers 
and on-site contractors who had been doing mainte- 
nance work. 

“Companies are in a death spiral if you try to do 
everything inside,” says Unger. 

William Belding is a beneficiary of that transition. 
Belding joined DaimlerChrysler in 1996 as a client/ 
server programmer/analyst. He focused on quality 
reporting for the automaker’s data warehouse. Since 
those tasks were sent to India last year, Belding has 
taken on responsibility for the security infrastructure 
of the company’s Web-based Dealer Connect portal. 

“It’s a good opportunity for me to see something 


Continued from page 41 





new, to extend my career in the right direction,” 
says Belding. 

But if the previous century’s outsourcing of U.S. 
manufacturing jobs is any barometer, many more 
displaced IT workers may have to settle for less. 
Blue-collar manufacturing workers who lost their 
jobs typically faced a lower standard of living, and 
the same fate could face programmers and others, 
says Josh Bivens, an economist at the Economic 
Policy Institute in Washington. High-tech outsourc- 
ing isn’t on the same scale as manufacturing’s, “but it 
has a familiar feel to it,” he says. 

James Pace, a Connecticut IT mainframe consul- 
tant who had been working at an insurance compa- 
ny, lost his job in January. He says he believes it was 
a result of offshore outsourcing. Pace says IT work- 
ers affected by offshore outsourcing are taking low- 
er-paying jobs, such as restaurant managers and po- 
lice officers, and that decreases their spending pow- 
er. “Everything is a trickle-down effect,” says Pace. D 


INTERNATIONAL BACKLASH 


U.S. and European government officials are considering proposals that 
would slow down the growth of offshore outsourcing 


QuickLink 37915 
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There's More to Consider Than Cheaper Labor 


than 
lower labor rates. Industry experts and CIOs with 
offshore experience caution would-be customers to 
carefully examine all of the risks, including the hid- 
den costs. It’s also important to protect intellectual 
property, examine the geopolitical risks in the region 
where the work will be done and effectively commu- 
nicate the company’s overall outsourcing strategy to 
stateside workers. 

Offshore outsourcing “creates some stressful situa- 
tions, some motivational factors and 
some confidence factors with your 
own people,” says Rick Greenwood, 
CIO at GMAC-RFC Residential Capi- 
tal Group in Minneapolis. Green- 
wood addresses those issues, in part, 
by keeping his company’s most im- 
portant IT work in the US. 

“We're very careful not to give 
away what I would say is a core com- 
petency and core business knowl- 
edge,” he says. Instead, he and other 
IT managers at the company try to maintain those 
competencies by providing IT staffers in the U.S. 
with continual training and moving them to high- 
impact projects. 


Scrutinize Political Risks 

Companies that exclusively outsource to a third par- 
ty in a single country run the risk that a political situ- 
ation, such as armed conflict between Pakistan and 
India, could shut down offshore IT operations. That’s 
an important consideration for Delta Air Lines Inc., 
which wants offshore work scattered in wider areas. 


“ 


FAST FACT 


is graduating roughly 
IT professionals 
Fras 
in the U.S. 


“We're trying to manage the risk of the political 
environment,” says Curtis Robb, president and CEO 
of Delta Technology Inc., the IT services arm of the 
Atlanta-based airline. The company has awarded 
IBM a contract to provide offshore IT services be- 
cause IBM has 16 regional centers worldwide. 

More than 90% of outsourced application mainte- 
nance, help desk and desktop maintenance work and 
a limited amount of call center and customer service 
work is currently being sent to India, according to 
Avinash Vashistha, a senior adviser 
at NeolT, a San Ramon, Calif.-based 
offshore services advisory firm. That 
figure excludes IT work outsourced 
to Ireland and Canada but includes 
other countries such as Israel, says 
Vashistha. 

Experts say outsourcing to India 
can reduce IT labor costs by up to 
50%, but most customers underesti- 
mate the indirect project and pro- 
gram management costs. 

“When you send your people overseas to visit 
these sites frequently, your costs go from $42 an hour 
to $85 an hour,” says Steve Andriole, a senior consul- 
tant at Arlington, Mass.-based Cutter Consortium 
and a professor of MIS at Villanova University. An- 
driole’s calculation includes travel costs plus the cost 
of lost productivity that occurs when a U.S. IT work- 
er is removed from his daily tasks and sent overseas 
for a few weeks. 

Those costs can go even higher when project re- 
quirements “creep” or if a development problem 
emerges at an offshore programming house, says An- 
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A look at programmers’ annual salaries 
in various countries illustrates why offshore 
outsourcing is becoming popular among companies 
trying to cut costs. The average salary for a 
systems programmer in the U.S. is $63,331. 
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driole. “If you have to drop in 10 people from the 
states, and they spend a month or two there, guess 
what? You’ve just erased most of your cost savings.” 

Another risk of moving IT work offshore is the 
potential loss of intellectual property and business- 
process secrets. Some IT managers worry that off- 
shore outsourcers will copy and sell that knowledge 
or repackage it and present it to a competitor. 

“If we send development of too much of our core 
business out of our control, what happens to that 
when our competitor goes to the same third party 
and says, ‘We want to do what they did?’” says 
Richard Nolle, vice president of systems at Reinsur- 
ance Group of America Inc. in Chesterfield, Mo. 
“The economics is driving me to it [outsourcing], but 
those kinds of concerns are making me cautious,” 
adds Nolle, whose company already sends applica- 
tion development work overseas. 

One way to avoid these problems is “by trying to 
break up key pieces” of work being sent offshore so 
“no one can easily assemble those pieces,” says Den- 
nis Roell, IT manager at Betts USA Inc. in Florence, 
Ky., which makes packaging products such as tooth- 
paste tubes. “Think of it as encryption — you want to 
reassemble the message,” says Roell. 

— Thomas Hoffman and Patrick Thibodeau 
We're 


6) trying to 


manage the risk 
of the political 
4 environment. 


CURTIS ROBB, president and CEO, Delta Technology 
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And the 
Winner Is... 


An IT awards 
program 
fosters 
collaboration 
between 
business 

and IT. 

By Melissa 
Solomon 


T 
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ATHY FONG KNOWS NUMBERS. 

As a certified public accoun- 

tant, it’s her job. But technol- 

ogy? She’s no rookie, but no 

expert, either. So when she 
received Southern California Edison’s 
(SCE) first-ever CIO Excellence in IT 
Award, she was simultaneously flat- 
tered and taken aback. 

It was no mistake. Fong was one of 
10 employees — including three from 
outside IT — to receive the new annu- 
al award in March from Mahvash Yaz- 
di, CIO at the Rosemead, Calif.-based 
energy utility. “What’s unique about 
our program is we decided to take it to 
a new level and recognize and award 
our internal clients,” says Yazdi. 

Honoring business unit employees 
with IT awards may 
seem counterintuitive, 
but Yazdi says it helps 
promote the value of 
IT/business partner- 
ships companywide. 

Such awards aren’t something that 
Sue Goldberg has seen. But the presi- 
dent of Northeast Training Group Inc., 
an IT training consulting company in 
Chestnut Hill, Mass., says they’re a 
great way to promote collaboration by 
shining a light on those who live it. 

“It’s almost like an Academy Award,” 
Fong says. “It’s probably the closest I'll 
ever get to that.” 


How It Works 


The names of the award categories — 
Commit and Deliver, Operational Ex- 
cellence and Innovation, and Technical 
Literacy — reflect the core strategies 
and principies of SCE’s IT department. 
Yazdi’s team wanted to choose role 
models who demonstrate day-to-day 
actions in line with those principles. 
Fong has spent the past year and a 
half leading a cross-functional project 
team that’s integrating systems across 
various business units so that meter 


STEAL 
THIS IDEA 





8 WHO: Mabvash Yazdi, CIO 
at Southern Calfornia Esk 
and Edison International, Rose- 
mead, Calif. 
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@ CHALLENGE: To instill IT values 
and strategies into the day-to-day 
activities of workers throughout 
the energy utility . 


@ SOLUTION: CiO Excellence in IT 
Awards, which recognize IT and 
non-IT employees. 


readings, billing and ledgers, for in- 
stance, are tied together into a whole 
system rather than operated as inde- 
pendent silos. 

John Ballance, director of transmis- 
sion and distribution engineering, won 
the Innovation award for teaming with 
IT to implement an Internet-based 
training system that veteran engineers 
can use to conduct lectures for junior 
engineers scattered around the state. 

It was wonderful to be honored by 
the IT department, Ballance says, but 
recognizing IT employees is just as crit- 
ical. “A large part of the company inter- 
acts with those people,” he says. “So 
you start putting faces to names of peo- 
ple who are doing extraordinary jobs.” 

Paul Killins, winner of the Commit 
and Deliver award, is one of those IT 


people, says Yazdi. When SCE learned 
it had to take over energy procurement 
from the state by Jan. 1, Killins, SCE’s 
IT energy procurement manager, led a 
team to get a combined procurement 
and risk management system in fast. 
The system and the business processes 
supporting it had to be able to manage 
SCE’s portfolio of power-generation 
assets, its long-term energy contracts 
from outside companies and its spot- 
market options to determine the best 
source of energy at any given time. 
The team conducted a warp-speed 
market study, hammered out a contract 
to purchase Nucleus energy-trading 
software from New York-based Cami- 
nus Corp. (since acquired by SunGard 
Data Systems Inc.) and teamed with 
Caminus staff and consultants from 
London-based PA Consulting Group to 
customize and install the software. 

At the heart of the system is a client/ 
server application with a robust infra- 
structure on which to run the systems: 
Windows 2000 servers and an IBM 
Regatta cluster on an Oracle database. 

What could have been a yearlong 
project took four months. “It was the 
most challenging project I’ve worked 
on in my entire life,” says Killins. 


Rolling Out Your Own 


If you create an IT award program, 
spend a lot of time spreading the word 
so enough nominations come in, advis- 
es Mariette Keshishian, manager of 
training and communication for IT at 
SCE. The company’s newsletter, cross- 
functional management meetings, 
e-mail and its intranet all helped get the 
word out, says Mary Fitzpatrick, man- 
ager of IT communications at SCE. 

Fitzpatrick also suggests that awards 
committees put careful thought into 
who gets recognized and in what way. 
For instance, would finalists be embar- 
rassed by being publicly named, since 
they didn’t win? And what’s an appro- 
priate prize for the winners? SCE 
asked the finalists’ managers to recog- 
nize them within their units, and the 
winners received $1,500 in cash, a crys- 
tal desktop award and companywide 
recognition, says Fitzpatrick. 

But the user-award piece isn’t for 
everyone, says Keshishian. If it seems 
forced, it won’t work. If you have a 
poor relationship with your users, an 
award isn’t going to magically make 
things better. You need to have a good 
relationship first, and then the award 
will seem genuine. D 


Solomon is a freelance journalist 
in New York. Contact her at 
| melissasolomon7@hotmail.com. 








1 


de arn) . a 


7 
7 


eur 






re Ze 
, 


*nYar 


~ See who's online in‘real-time. 


Pe 


See knowledge shared in real-time 
‘See real-time teamwork at work. 


i 


Lotus Instant Messaging is the leader in instant messaging for business. Lotus software lets you know 
who's available, on demand. It creates real-time, virtual collaboration, on demand. It can create cost 
savings and quicker response time instantly. Everyone becomes more agile. Your communication is 
more aaency Business advantage is immediate. For a Lotus webcast, visit ibm.com/lotus/seeit 
(e’ business on demand software 









IBM. Lotu, the e-business logo and e-business on demand are registered trademarks or trademarks Of international Business Machines Corporation in the United States andor other countries’ Certain 
ntarmatic tained within this a Bern results from the Osterman Study “Survey on Instant Messaging !ssues’ (9/0: 
has settied on an IM standard. 





i Pur ame esi iar mare ela Bia Roe ale | 
solution in situations where an enterpr 2002 Osterman Research. inc. © 2603 IBM Corporation. All rights reserved. 


46 COMPUTERWORLD April 28, 2003 


f 
7 Lat T | andya, LG TT aay Sha) 
| M Pp ee hi ATT > 


In 1999, the Wharton School of the University of 
Pennsylvania launched Knowledge@Wharton 
(http://knowledge.wharton.upenn.edu), an online 
research and business analysis journal designed to 
go head-to-head with the Harvard Business Review 
by offering business insights and research. 

Now, Robert E. Mittelstaedt, vice dean and director 
of the Aresty Institute of Executive Education at 
the Wharton School, and Mukul Pandya, editor 
of Knowledge@Wharton, have written a book. 
Knowledge@ Wharton: On Building Corporate 
Value VJohn Wiley & Sons Inc., 2003) takes a look at 
the ups and downs of e-business. They recently spoke 
with Kathleen Melymuka about the lessons learned 
so far about Web business strategies. 


So, has the Internet changed everything? 

MITTELSTAEDT: It didn’t change everything in the way 
people anticipated, but it did [show] that bricks-and- 
mortar businesses can differentiate themselves if 
they really learn to use the Internet — and IT asa 


MANAGEMENT 


| whole — because the principles are the same, and 
the Internet is nothing more than a very easily acces- 
sible platform. 


In the book, you talk about some important consequences of 
the Internet. Tell me about the “integration effect.” 
MITTELSTAEDT: It’s the ability to apply 20- 

year-old IT principles in a ubiquitous fashion 

so that everybody has access, and you get 

your customer to do your work for you 

across a whole spectrum of things. 


Can you give an example? 

MITTELSTAEDT: US Airways has given you the 
ability to print your boarding pass before you 
leave home and skip all the check-in lines. They 
haven’t changed the fundamental chain of activities, 
but they’ve pushed a piece of that work out, and they 
get the customer to do it for them. The technology 


How does the Internet add value to an organization? 
Knowledge@ Wharton itself is an ex- 

ample. It has taken academic research, which 

was primarily distributed through academic 

journals meant for specialists. Using the 

Web, we set up a multilayered Web site 

where you can go from a one-paragraph 

summary of a research paper, click through 

to a plain-English article spelling out the im- 

plications of that research, click through to a 

PDF of the paper itself and look at related 

Web links. The Internet allows you do something 

that is impossible in print: that is, explore this topic 

at four different levels of depth. The impact that has 

in terms of Wharton’s ability to relate academic re- 

search to management practice is enormous. 


Why do companies fail at using the Internet? 
MITTELSTAEDT: In the book, we talk about the story 

of Webvan vs. other online grocers. We predicted 
Webvan would never work [because] they decided to 


ess took on enormous debt, which there was no way 
to ever work off in a low-margin business, even with 
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reinvent the whole system. They started from scratch 
and ignored the entire infrastructure and in the proc- 
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efficiencies from technology. While Webvan was fail- 
ing and destroying $1.2 billion of capital, a company 
called Tesco in the U.K. was using their existing in- 
frastructure, using their stores as picking points, 
putting limits on [deliveries]. And as an incrementai 
activity, it was profitable. It was not prof- 
itable as a stand-alone activity in the way 
Webvan tried to pursue it. The economic 
model didn’t work. So the model matters. 


What are some of the other major risks in e-busi- 
ness, and how can companies work against them? 
Quite a few of the errors were driven 
by not looking at the business itself but be- 
ing swayed by financial considerations, 
[like] the stock valuations, that spinning out a sepa- 
rate Internet division could bring about. Companies 
that looked at the business and saw how using the In- 
ternet and other forms of IT could enhance the busi- 
ness — those were able to drive more value creation. 
MITTELSTAEDT: There were also competitive risks. If 
what you do is easily imitated, and you don’t have 
anything that locks in your customer in some 
way, you run the risk of simply being copied 
and made irrelevant. 


Most of what we’ve been talking about has been 
business-to-consumer. What's the state of B2B? 
MITTELSTAEDT: The name has gone out of 
fashion, but that’s where the bigger impact 
really is. Wal-Mart has an unbelievable com- 
puterized supply chain and inventory man- 
agement system that goes over the Internet, but the 
Internet didn’t make that happen. The Internet 
makes it easier and cheaper .. . and for smaller busi- 
nesses to duplicate functions, [like] automatic order- 
ing, that enable them to compete with bigger compa- 
nies in some cases. 

One area in business-to-business I find fasci- 
nating is the way the Internet and IT are making it 
possible to outsource work across borders. You have 
companies like Amazon or Dell that have set up cus- 
tomer contact centers in India and Singapore, and 
these are very often operated by different companies 
than the parent. This allows you to integrate the op- 
erations of a company in the West with a low-cost 
provider in another country and get the benefit of 
that cost differential. This has been going on in 
things like software development, but increasingly ... 
it’s all kinds of services that require educated people 
to interact with technology. The term I’ve heard used 
for it is “brain arbitrage,” because you’re moving 
work to where it can be performed most effectively. 


What are the lessons companies should be taking away from 
the whole e-business experience? 

MITTELSTAEDT: You can’t violate the laws of econom- 
ics. And there’s no such thing as a sustainable com- 
petitive advantage. Technology can give you a tem- 
porary advantage while you figure out what the next 
thing after that is going to be. 

The Internet changes a lot, but you have to 

work pretty hard to discover what it changes, and if 
you don’t recognize that, then you pay the price for it. D 


Melymuka is a Computerworld contributing writer. 
Contact her at kmelymuka@yahoo.com. 
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SOURCE: IDC, FRAMINGHAM, MASS. 


Financial Outsourcer 
Creditek Names CIO 


Creditek LLC, a leading provider of 
revenue-cycle business-process 
outsourcing in Parsippany, N.J., 
this month appointed Bruce Blair 
as senior vice president and CIO. 
Blair will lead Creditek’s technolo- 
gy team in managing all internal 
and external systems, including 
the development, launch and im- 
plementation of advanced client 
business-intelligence and reporting 
systems. 

Blair was previously president of 
Iselin, N.J.-based GovXcel, a pro- 
vider of software used by munici- 
palities to automate back-office 
functions; CIO at Verticalnet Soft- 
ware LLC, a Malvern, Pa.-based 
provider of collaborative supply 
chain software; and a first vice 
president at Merrill Lynch & Co. 
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Approximately 43% of 
See R OEM Tee) oN ELLE 
structure and application ser- 
vices (WIAS) originated in the 
Americas in 2002. This share 
will remain fairly consistent, 
reaching 45% in 2007. 


rey Ter L ews M unter LE 
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will embrace WIAS at the 
fastest rate and with the high- 
est level of expenditures. U.S. 
industries are expected to 
spend $25.6 billion by 2007. 


Pe eM LCR ey 
in both scope and complexity, 
opportunities will continue to 
Pee CRS 
~ tion and managed services, in- 
cluding the measurement and 
planning of users’ network ca- 
pacity needs and the design of 
appropriate networks to meet 
those needs. 


The worldwide total of avail- 
able “hot spots,” or high-speed 
wireless LANs, will increase 
frem about 19,000 sites at the 
end of 2002 to about 118,000 
in 2005. 
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Magna Cum 
Unemployed 


HEN I CHANGED my college major 
from mechanical engineering to com- 
puter science in 1998, I had few res- 
ervations about making the switch. 
After all, the salaries of the two pro- 
fessions were comparable, and IT seemed to be thriving. 


Unfortunately, my gradu- 
ation in December 2000 
roughly coincided with the 
crash of the dot-coms and a 
dip in the economy, which 
made job searching much 
more difficult. 

No fear, I thought, I have 
an academic record that 
will impress employers and 
help me stand out among 
job candidates. I had grad- 
uated magna cum laude, 
made the dean’s list multi- 
ple times, won awards for 
academic excellence — and 
no one seemed to care. The liability of 
my inexperience seemed to outweigh 
any advantage that a solid academic 
background provided. 

The slowing of the economy has left 
many experienced IT professionals 
looking for jobs, and companies have 
their choice of workers with proven 
track records. This means decreased 
opportunities for entry-level program- 
mers with résumés heavy on skills and 
education and light on job history. 

Illustrating this fact are the employ- 
ers and headhunters who call to ex- 
press interest in the skills I have listed 
on my résumé online. One of their 
first questions is, “How much experi- 
ence do you have?” Answering this 
potentially damning question with 
honesty usually ensures no future 
correspondence. 

The lack of opportunities made me 
increasingly worried, and in Septem- 
ber 2001, I committed an act of des- 





peration. I had been job 
searching by myself and 
through employment agen- 
cies for almost eight 
months when I accepted a 
knowledge management 
position at a government 
agency in Washington, 
where living expenses are 
high and the pay is low. The 
job was part intern/part 
employee and kept me on 
the periphery of working 
with IT (checking e-mail 
was my sole interaction 
with computers). After six 
months in the program, I decided to 
return home and earnestly look for op- 
portunities in software development, 
the area of most interest to me. 
Searching online job sites yielded 
few possibilities for someone with my 
level of experience; I fared better by 
contacting hiring managers directly. 
After three months of research and 
many phone calls to managers, I land- 
ed a job as a Web developer at a strug- 
gling e-learning company. But after 
being told almost every week for six 
months that the office might not be 
open the following week, I was search- 
ing for another job by December 2002. 
During this time, I had also enrolled 
in a graduate program, thinking that 
another degree might help me find a 
job. However, since starting the pro- 
gram, I have considered the possibility 
that even this move may not help, be- 
cause there are factors affecting the 
job market that are beyond my control. 








For instance, the controversial H-1B 
and L-] visa programs exacerbate the 
situation by importing foreign IT 
workers, placing them in direct com- 
petition with American workers for 
jobs. This, by far, is the most disturb- 
ing discovery to me. Abuse of these 
programs is obvious, and their neces- 
sity escapes me. 

My heart sinks when I read stories 
about IT workers such as those at 
Siemens in Lake Mary, Fla., who were 
replaced by L-1 visa workers and made 
to train their replacements. The mat- 
ter is compounded by the trend of 
sending IT jobs offshore, as summed 
up in the ominous proclamation of 
Ann Livermore, HP’s services chief, 
when she stated, “We're trying to 
move everything we can offshore,” 
in an interview in a December 2002 
Forbes article. Taking these things into 
account, I am convinced that the IT in- 
dustry is being undermined. 

This point was driven home as I sat 
with the head of the computer science 
department at my university and we 
spoke about the scarcity of IT jobs. “I 
shouldn’t be saying this, because I am 
from India,” he said, “but India has 
really prospered through this.” I told 
him that I was aware of all the out- 
sourcing, but he explained that compa- 
nies such as Microsoft were going a 
step further and setting up shop in In- 
dia. Then he reassured me that cre- 
ative IT jobs such as research would 
be safe in the U.S., but he corrected 
himself midstream by saying that GE 
was in the process of constructing a 
research center in India. 

Finally, he punctuated his remarks 
by saying, “It’s been a tough three 
years,” an understatement with which 
I emphatically agree. D 
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| Foodbrands America Inc. unit 


Tyson Integrates IT, Cuts Costs After Merger | :'»2::2kins congiomerat 


BY MARC L. SONGINI 


A massive IT consolidation and | spite its co 
integration project phase was__| ity and demanding schedule. 
multimillion-dollar ef- pendent companies of the 


wrapped up on time and on 


oti 


June 18 - 20, 2003 
Jacob K. Javits Center 
New York City 


| budget at Tyson Foods Inc., de- | fort involved integrating the 
iderable complex- | IT operations of Springdale, ber 2001. 


IBP Inc. Tyson pur- 
chased IBP in Septem- 


Ark.-based Tyson and 17 inde- The integration was fin- 


ished in August, says 


“Our sights are set on corporate 
growth. We need to.move fast 


to stay competitive 


My IT department can barely keep 
their heads above water with the 
day to day issues, let alone have 


time. to research new system options 


I'm willing to invest in. the education 
of today's technology if the return 
improves our productivity.and 


bottom line results 


€ 


The Information and Communications Technology (ICT) 


Conference and Tradeshow - strictly business to business. 


CeBIT America's 3-day, enterpr&e only Conference and 
Tradeshow provide direct access to the world's systems, applications, 
communications and networking leaders, in one place, at one time 


If you're charged with integrating technologies. and applications to 
meet your organization's business objectives, then we'll.see you at 
CeBIT America - Where the World Turns for ICT Solutions 


Register Now! Visit www.cebit-america.com/info6 to register with priority 
code MAH3 and view our online brochure, or give us a call, 212-465-0531 


www.computerworld.com 


new CIO, Jeri Dunn. In the 
| process, Gary Cooper, the for- 

mer CIO and head 
of the project, be- 
came chief technol- 

ogy Officer. In his new role, 

Cooper oversees all servers, 

databases and other IT-related 

assets for 12,000 end users at 

the company. 

Cooper says that as part of 
the makeover, Tyson changed 
its e-mail infrastructure to 
Microsoft Exchange software, 
eliminating Lotus Notes seats. 
It also extended its WorldCom 
frame-relay network to the IBP 
network and now runs video- 
conferences over those lines. 

Tyson inherited 19 systems 
in the merger and has reduced 
that number to two. The next 
step is to get rid of one more, 
says Cooper, noting there are 
also significantly fewer AS/400 
applications running now. 

There is still work under 
way to move the multiple 
back-end systems, many 
them homegrown, to an SAP 
ERP backbone. SAP software 
already handles payroll, gener- 
al ledger, purchasing and ac- 
counts-payable functions. 
Tyson is also rolling out sup- 
ply chain management soft- 
ware from Manugistics Inc. 
for its chicken businesses. 

Streamlining has reduced 
head count and maintenance 
costs. Dunn says this has cut 
hundreds of thousands of 
dollars in IT-related costs. 
“The reductions were not 
pleasant,” she says, but they 
were necessary. 

Tyson is evaluating business 
processes and IT support to 
see what areas are unique or 
add value and can be retained 
or standardized. It’s also plan- 
ning the consolidation of the 
fresh meats division of IBP. 

Cooper is hesitant to say 
whether lessons were learned 
from the project. “We've ac- 
quired so many companies 
and integrated so many sys- 
tems,” he says. “It’s a bag of 
tricks you use, and there are 
not a lot of ‘aha’s. It’s always 
hard work.” D 
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Read more about Tyson's integration: 
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1 for Nominations 


ls youreorganization making the most 
of technology on the cutting edge? 


We want to hear about it! 


Computerworld’s Innovative Technology Awards 2003 will honor 
the industry's top vendors that are helping their customers 
achieve business value through technology. 


Tell us about your successful technology application 
and nominate your vendor online at 
www.computerworld.com/research/innovativetech 


ABOUT THE AWARDS 

For the second year, these customer choice awards will 
spotlight leading vendors and showcase how their customers 
are using technology to solve business problems in real-world 
settings. Nominations from IT customers will be collected 
from now through May 12, 2003. Nominated vendors will be 
surveyed about their technology applications. A panel of 
outside experts and Computerworld editors will review the 
Surveys and choose the winners. 


COMPUTERWORLD 


from IT leaders using these technologies will be INNOVATIVE 
published in the September 22, 2003, issue, 
as well as online at Computerworld.com. TECHNOLOGY 


Need More Contact InnovativeTech@computerworld.com. 
Information? But hurry! The nomination deadline is May 12, 2003. 


Survey results and stories that offer practical advice 





IT EDUCATION, TRAINING & CERTIFICATI 
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IT Careers: Industry Drives 
Online Degree Trends 


ore than 20,000 people in the United States 
are finding a new way to quickly morph 
current skills into emerging job require- 
ments. Colleges and universities are using 
online coursework to stay in step with rapidly developing 
technologies, pushing online curriculum that in the past 
would have taken years to develop. From data mining to 
infrastructure security and systems networking, the new 
degree programs are allowing IT professionals to transform 
with the industry 
These aren't diploma mil! programs, either. Universities 
ranging from Stanford University to Massachusetts Institute 
of Technology, from Boston University to James Madison 


University and the University of Missouri-Rolla, are 
enrolling students for classes conducted via the Internet. 
“Traditionally, residential universities and colleges have 
been slower in meeting emerging technology needs,” says 
Vicky Phillips, author of Best Distance Learning Graduate 
Schools-Technology 2003. “We're noticing that schools are 
choosing to put newer concentrations, such as cyber 
security, online to be market responsive.” 

Tanya Zlateva, chairman of the online computer science 
graduate program at Boston University, says demand for 
online courses follows the IT industry trends. “We offer a 
blended program of four face-to-face meetings during the 
semester and web-based learning,” Zlateva says. The uni- 
versity added an IT security focus to its graduate programs 
this year, and will offer a full concentration IT security 
program beginning Fall 2003. “It’s relatively easy to put 
material online,” she adds. “But by adding streaming video 
and interaction, access to lab work online and other facets, 
the program has greater value.” 

However, online study isn’t for everyone, cautions 
Phillips. Top on the list to consider: your own learning style. 
If you've taken online, CD-ROM or correspondence courses 
in the past, you know whether you're up to it. “You need 
good time management skills and self-motivation,” says 
Phillips. “It’s a large psychological factor.” Phillips’ research 
indicates retention rates for online students are slightly 
- though not significantly- lower than those in on-campus 
programs. 
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“ GIBBS 


at GIBBS COLLEGE, you can train for a new career in: 


www.bu.edu/met 


Secondly, look for accreditation by the regional associa- 
tion accrediting schools and colleges for the main campus, 
as well as any other accreditations, such as those for busi- 
ness, engineering or technology. If the accreditation isn’t 
from a group belonging to the Council for Higher Educatior 
Accreditation (chea.org), you may want to reconsider. 
Then find out how much you'll interact with faculty and 
other students. You may need access to a satellite link-up 
or to travel to campus. Usually students in an online class 
interact via bulletin board or through conference calls. The 
more you interact with students and faculty, the more likel 
you'll stay in the program. 

Financial assistance is another factor. Not all online pro- 
grams qualify for low-interest student loans, nor do all cor 
porate reimbursement programs apply. Public universities 
frequently apply in-state tuition/out-of-state tuition rates 
just as they would for resident students. Some, however, 
have a single distance-learning tuition structure. In terms ¢ 
cost, compare overall tuition costs, the vaiue of a national 
brand name degree, and the cost of access ~ visits to 
campus or satellite links, for example. 

“We haven't yet seen the peak in enrollment for online 
degree programs,” predicts Phillips. “With learning, once i 
not enough.” 
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Please contact: Nancy J. Percival, 

Director, Recruitment Advertising, 

at 800-762-2977 

500 Old Connecticut Path 
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Pant-TIME EDUCATION, FULL-TIME EXCELLENCE 


Computer Science Programs 


Boston University 


617-353-6000 


Metropolitan College's undergraduate and graduate degree and certificate 


programs in Computer Science provide working adults with the technical skills 


to succeed today and the theoretical knowledge to remain competitive for life. 


Classes are designed for adults with and without prior technical training. 

BUSINESS 

¢ Executive Assistant 

* Office Administration 
Medical 
Legal 

© Corporate Assistant 

¢ Business Administration 
Accounting 
Marketing 

© Hospitality Management 


GIBBS OFFERS: 
* Day, evening and weekend ciasses 
* Tuition planning assistance 
availabie to all students 
© Placement assistance for graduates g 


TECHNICAL 

© Computer Technical Support 

© Computer Network Administrator 
© Computer Programming 

© Telecommunications 


CRIMINAL JUSTICE 
GRAPHIC DESIGN 

© Visual Communications 
® Illustration 


WEB DESIGN 
WE’RE OPEN 7 DAYS A WEEK! CALL TODAY! 


1.800.447.8100 


Gibbs College 
E74 33 Plymouth Street i : 
Montclair, NJ 07042 e-ssential companies 


www.gibbsmontclair.com My 


e-normous opportunities 
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METROPOLITAN COLLEGE 


New! Master’s degree in Computer Science 
with a concentration in Security! 


Boston University is an equal opportunity/affirmative action educational institution 
and employer. 


e-lite companies PLEASE VISIT US AT 


e-merging companies 
DIRECTLY AT 
1-800-762-2977 
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Exec Search, Inc. a technology- 
consulting firm has job openings 
both locally & around the coun- 
try for Programmer Analysts 
Database Administrators, & 
Software Engineers w/exp in 
one or more (depending on 
need) of following skills 
WebMethods Integration Server 
WebMethods Trading Networks 
WebMethods Enterprise Server 
IBM MQSeries, IBM Assembler 
IBM WebSphere, Mainframes. 
CICS, DB2, COBOL, Unix, Sun 
Solaris, Win, C/C++, Visual C++ 
VB, Power Builder, Dsgnr 2000 
Dvipr 2000, Oracle, Oracle 
Applic, SQL Server, MS Access 
SQL, SQL Plus, PL/SQL, Data 
warehousing Tools HTML 
DHTML, XML, TCP/IP, Perl 
JSP, Weblogic, Java, Java 
Script, VB Script, ASP, Clarify. 
Documentum, CoreDossierX 
Rational Rose, Testing tools & 
QA methodologies. Some pos 
req Bach others Master's in 
Comp Sci or related field, or its 
equiv as well as relevant IT exp 
Relocation may be necessary 
depending on particular employ- 
ment pos. Send resume to Exec 
Search, Inc., C/O ISS, 1300 
Bent Creek Bivd, Ste. 200 
Mechanicsburg, PA 17050 


Sr Applications Systems 
Analyst (Indianapolis, IN) - 
Design, dev., create, procure 
code, test, implement, install & 
maintain computer software sys- 
tems. Apply principles & tech- 
niques of comp. sci., engg 
investigation, planning & analy- 
sis, to determine software 
requirements & feasibility of 
design w/in time & costs con- 
straints Handle RenCS 
Gembase & Oracle DB admin 
Interact w/ customers to evalu- 
ate business processes, inter- 
face btwn software & hardware 
data processing & information 
requirements & system 
resources. Research & recom- 
mena data communications 
solutions. Formulate & design 
software systems, applications 
programs, & architecture. Utilize 
SQL, Unix, & Oracle. B.Sc. in 
Comp. Sci., IT, Math, or Eng’g & 
3 yrs exp. in position offered or 
as DBA, Syst Analyst, or SW 
Eng’. 40 hrs/wk 9 to 6, M-F 
EOE. Send resume & cvr. Itr. to 
Attn: Global Business Systems. 
Alcoa CSI, 6625 Network Way 
Ste 200, Indianapolis, IN 46278 


Business Systems Analyst to ana- 
lyze, develop integrated comp sys- 
tems for hospitality supply industry 
using SAP; interact with cus- 
tomers/industry partners; identify 
implement SAP Functional/System 
enhancements to improve system 
efficiency; provide functional exper- 
tise to assure data integrity be 
tween integrated software appis 
provide SAP training to current/new 
staff. Require: B.S. or foreign equiv. 
in CS/Bus Admin with 2 yrs exp in 
SAP systems. in lieu of BS, 3 yrs of 
academic studies in one of the 
above plus 1 yr of work exp in SAP 
systems will be accepted High 
salary. Responses to’ Three R 
Hotel Group, 1300, 319 E. Bypass 
N, Moultrie, GA 31788. 


Jr. Consultant sought by NYC 
Computer Consulting firm to 
analyze user needs, to dsgn, 
dvip & impimt medium to 
large scale applics using tech- 
nologies such as Crystal 
Reports, VB, VB Script, MS 
Access, MS SQL Server 
Sybase Adaptive Server, MS 
Win 95/NT. Must have MS in 
Comp Sci or Engg, Info 
Systems Engg or related w/1 
yr relevant work exp. Send 
resume to Gemini Systems 
HR #JCDH, 61 Broadway, Ste 
925, NY, NY 10006 


Senior Staff Engineer (Denver. 
CO) - Serve as a tech consultant 
to eng management in telecom 
transmission eng using knowl 
edge of design concepts for tele- 
com networks; system design 
principles for long-distance links. 
digital trans systems; fiber optic 
cables/associated propagation 
techniques; trans eng design for 
fiber optic systems; networking 
principles; telecom traffic eng; & 
SONET systems Provide 
advanced tech leadership in 
design, analysis & problem solv- 
ing efforts to special design 
team, tech review team, or prob- 
fem resolution team. Work inde- 
pendently & exercise consider- 
able latitude in defining & pursu- 
ing special advanced telecom 
eng projects. Initiate & execute 
advanced research & develop- 
ment activities. BS EE, Systems 
Eng. or related + 5 yrs related 
exp + working/theoretical knowl- 
edge of: Design concepts for 
telecom networks; System 
design principles for long-dis- 
tance links; Digital trans sys 
tems; Fiber optic cables/associ- 
ated propagation techniques 
Trans eng design for fiber optic 
systems; Networking principles 
Telecom traffic eng; & SONET 
systems. $82,949/yr. M-F. 40 
hrs/wk. Must have proot of legal 
authority to work permanently in 
the U.S. Application by resume 
only to: EMPLOYMENT PRO- 
GRAMS, PO BOX 46547, DEN- 
VER, CO 80202 & refer to 
order#C05041851 


Programmer Analyst. Sought by 
Englewood Colorado consulting 
company to work in various unan- 
ticipated locations throughout the 
U.S. Under direct supervision, ana- 
lyze, pian, develop, test and docu- 
ment computer programs including 
business and web applications and 
etwork Communication programs. 
Evaluate user requests and soft 
ware program requirements for 
new and modified programs. Write 
specifications, code, test and de. 
bug computer programs. Use of 
Oracle, Java, JavaScript, MQ 
Series, JSP, EJB, J2EE, WebLogic 
UNIX, Serviets and Windows NT 
Reqs. Bachelors or equivalent in 
Computer Science or related deg- 
ree. Plus 1 year in the job offered or 
1 year in a related occupation 
including Systems Analyst or Web 
Developer or related experience 
Will accept 3 years of college edu- 
cation and 3 years experience in 
lieu of required education and 
experience. $63,000/year, 40/hrs: 
wk, 9AM-5PM. Respond by resume 
to EMPLOYMENT PROGRAMS. 
PO Box 46547, Denver, CO 80202. 
and refer to Job Order No 
C05042383 


SENIOR PROGRAMMER/ 
ANALYSTS 


MARA CONSULTING, INC., a 
California-based Corporation, has 
immediate openings for Senior 
Programmer/Analysts with at least 
five years’ experience in Natural 
ADABAS/Programming who have 
worked on IBM mainframe plat- 
forms utilizing MVS/XA ESA and 
OS/390 Operating Systems. Appli- 
cants must also have at least four 
years of formai academic training in 
computer data processing, Compu- 
ter Science or a related field culmi- 
nating in government diplomas or a 
Bachelor's Degree. Must be willing 
to travel from the Sacramento. 
California area to temporary work 
sites throughout the United States 
to be paid, at least, the prevailing 
wage in that area. Employees will 
remain employed by MARA CON- 
SULTING, INC., (www.maracon 
sulting.com) with continuing bene- 
fits. Send your resume with current 
address and telephone number to 
MARA CONSULTING, INC., 8577 
Almond Bluff Court, Orangevale. 
CA 95662 or email to 
maracons@pacbell.net. EOE 


IT CAREERS 


Avon, a world leader in the 
health and beauty products 
ndustry is seeking a Technical 
Manager, Webmaster at its 
headquarters in NYC. The 
Technical Manager, Webmaster 
migrates all the existing sites to 
Interwoven Teamsite Server 
Develops i designs tem- 
plates, Data capture forms and 
workflows. Designs and devel- 
ops internet and intranet web- 
sites for the company 
technologies such as CG 

ng in PERL 

VPScript, JAVA ASP, Cold 
Fusion web developmen 

Flash, Photoshop, UNIX 
Teamsite server administration 
Develops a Content Submission 
System. Provides local technical 
support to the web content 
team. Performs server side 
management of Teamsite serv- 


er 


Must have a Bachelor's or for 
eign equivalent degree in 
Computer Science or Engin- 
eering and 2 years experience 
The required experie must 
include 2 years in b site 
development in Interwoven 
Teamsite Server Web 


Development and Web develop- 


VB Script, CGI 
PERL, C++; and 
(ii) 1.5 years in SQL Server, MS 
Access, Photoshop, and Flash 


Programmi 


Please se’ resume to: Attn 
HR Specialist, Avon Products 
Inc 1345 Avenue of the 
Americas, New York, NY 10105 
Fax: (212) 282-6149. E-mail 
jobs6@avon.com 


Software Deve r, Internet 
Applications wanted to develop & 
maintain customer-centric internet 
applications that maintain & en- 
hance company's adership posi- 
develop & deploy eCRM plat- 
form to customize & automate 
business transactions with con- 
stituents using Delano for encap- 
sulating business logic such as 
survey forms/questionnaires. e- 
mail attachments, newsletters & 
periodic updates: use T-SQL to 
extract data from SQL Server 
database; implement eCRM pilot 
projects consistent w/ strategic ini 
tiatives, using state-of-the-art 
tech. such as XML, ASP. Peri 
Lotus Notes/Domino, & OCR for 
Forms, provide support from Tech 
Services Marketing & other 
business units for customer- 
focused technology produ 
services; support Tech. Services 
in adapting, modifying, & 
replacing existing technologi 
create & maintain comprehensive 
integrated user services. Mu 
have Bach. deg. in Comp. Sci. or 
related field, & 2 yrs. exper. in 
internet & relational database 
design, development & production 
in a realtime production environ 
w/ reporting & data analytical 
skills, incl. exper. in developing 
with HTML, XML & ASP, Lotus 
Notes/Domino, Delano & script- 
ing in OCR for Forms. Salary 
$68,000/yr. Send 2 resumes to 
Case#200201292, Labor 
change Office, 19 Staniford St 
Fi., Boston, MA 02114 


Programmer/Analyst: Dev 
sports related websites 
Understand/define client 
req.; design, dev, 
tesvimplement solutions 
use Visua! Basic/other 
programming  technolo- 
gies. Dev reusable object 
library. Req: 3 yrs exp. 9a- 
5p. Resume: E. Derechio, 
TWI Interactive, 20 Guest 
St., #400, Brighton, MA 
02135 


Lead Software Release 
Engineer. Responsible for all 
aspects of the planning, design 
and development of support 
software product lines. Duties 
include building and leading pro- 
ject teams in development activ 
ities for high quality software. 
meeting tight market deadlines 
Ensures development of soft- 
ware requirements and specifi- 
cations. Works in C/C++, UNIX 
Wind River Systems support 
systems. Reviews, evaluates 
and approves software project 
technical proposais, methods 
and schedules. Manages techr 
cal staff to achieve design objec- 
tives. Monitors progress on pro- 
jects to ensure fulfillment of 
product scheduling objectives 
Works with Module Deve- 
lopment to integrate software 
and hardware Npatibility 
issues. Participates in TQM 
activities, including responsibili- 
ties designed for the company 
Quality System and ISO 9000. 
oriented at continuous process 
improvement in Software 
Engineering as well as in overall 
product development. Require- 
ments include a Bachelor's 
degree or equivalent n 
Computer Science and 
Engineering discipline or related 
fieid and three years of experi 
ence in the job offered or related 
field of system software product 
development. Applicants must 
have unrestricted authorization 
to work in the United States. 
Salary $89,257-$100,000/year. 
40 hours/wk. "Respond with two 
copies of resume to Case 
#200200420, Labor Exchange 
Office, 19 Staniford St., 1st F 
Boston, MA 02114 


PRINCIPAL SOFTWARE ENGI- 
NEER. Design, implementation. 
testing and maintenance of soft- 
ware components and subsys- 
tems which are incorporated into 
one or more company software 
products; utilize contemporary 
techniques and tools including 
Visual C++, Microsoft Foun- 
dation Classes and Various 
Microsoft Windows multimedia 
APIs to develop software; works 
with product features relating to 
visual display and synchroniza- 
tion, user interface, utilization of 
DirectX filtergraphs, and audio 
recording and playback "engine’ 
duties include project manage- 
ment and design utilizing knowl- 
edge of Windows system inter- 
nals and digital signal process- 
ing (DSP). Requires B.S. or 
equivalent in Computer Science 
Mathematics, Electrical Engin- 
eering or Physics plus 5 years 
exp. in job offered or 5 years 
directly related experience 
including image processing and 
audio/music. Rate of Pay 
$110,000/year. Hours: 40/week 
9 am to 5pm. Reply by resume 
only (2 copies) to Case 
#200201326, Labor Exchange 
Office, 19 Staniford Street, 1st 
Floor, Boston, MA 02114 


VP - Solution Engineering & 
Consulting. Lead a group of 
Engineers responsible for devel- 
oping and deploying Reai Time 
Locating System (RTLS) solu- 
tions. Requirements and duties 
to include: Managing the devel- 
opment and deployment of new 
applications. Directing complex 
projects requiring system inte- 
gration, hardware engineering 
and software development 
Manage product complexity and 
versioning control. Integrate 
wireless networking S/W & 
Radio Frequency (RF) hardware 
devices. Degree in Computer 
Science/Engineering and exten- 
Sive experience req'd. Job loca- 
tion is at Newton, MA. Send 
fesume to Thomas Bacon 
WhereNet Corporation, 5920 St 
Clair Highway, China, Michigan 
48054 


SENIOR SYSTEMS ANALYST 


se of C-CMIS253 


SYSTEMS ANALYST Ii & 
ANALYST, LEAD 
WEB SYSTEMS IT 


ts Aurora 
n, Florida 


Systems 


Must possess at least a bachelor's 
Somputer e or a related 
work experience 
with Oracle Applications, Oracle 
Databases, Oracle Tools and PL 
SQL for Aurora opp unity or rele- 
vant supervisory/iead experience 
with small teams 


pment experience 


Electronic Data Interchange 


for Boca Raton opportunity 


Resume and/or 
vefect each team 


and specify reference code 


ALPS or it will be rejected 


Theresa Maia 
ADT, One Town C Road 
Boca Raton, FL 


Forward resume t 


Business and Quality Assurance 
Analyst (BA/QA) needed to take 
part in defining Visibillity’s testing 
process and protocols, develop test 
scripts with the BA/QA Team, exe- 
cute testing plans using manual 
automated, and performance test 
scripts. The BA/QA will als 

with Applicatic 


accurately test against 
ments, user interface de: 

user acceptance y & resolve 
application issues with applicatior 
developers and assist the 

gy infrastructure team 

scalability, si 

date must have Maste 

er or related field, a BS ir 

ing or Computer related field 

have knowledge of SQL 

Visual Basic, HTML, JavaSc 

Visio and MS Project. This is a ful 
time position, from 9am. to 5p.m 


iT\careers 


Basic pay 
year FT ar 


benefits 


grammer (North Paim 
Write and fix syste 
software in PERL, HTML 
JAVASCRIPT nm a_ Unix 
Environment Program Per 
Modules/APIs utilizing ODBC. 
DBI utilities. Produce system 
documentation for new prod- 
ucts. Technical support for web- 
mance degrada- 
bleshoot reservations 
including writing code. 
ilize knowledge of Apache 
running Raven and Modper! 
XML, Peri, Per 
HTML, Javascript 
and Windows 
PVCS, Sabre 
Mini f Bachelor 
n C puter Informatior 
a 6-month experi- 
ence in job offered or 6-month 
expenence as a 
Support Assistant. 4 
week am. - 53 
$46. year. Please send two 
Jean Wroblewski 


and Data Acquisit 
tems. Primary 





IT Careers.com 


SYSTEMS ANALYST 


general direction, will pro 
application support for a ware: 
use Management system. Will 
tate and perform analysis 
programming; testing 

systems and € 


Soft 
ynsible fc design 
coding and testing 
features as well as par 
pating in code reviews < 
Jesign discussions for additior 
to HACMP software the compa- 
produces. Duties include 
writing functional requirements 
working on complex technical 
designs and producing design 
uments; technical mer 
engineers, rev 
ional requirements 
documentation of 
engineers; coding ar 
testing own features and com 
ponents of other ures; and 
fixir most defects. Utilize 
knowledge of Unix networkir 
Unix Systems Programming 
Distributed Systems or Avaii- 
Management. Require 
a Bachelor's 
Jegree or equivalent in 
ymputer Science, Electronics 
or related Engineering field with 
at least five years of work expe- 
rience in the job offered or relat 
ed field of software engineering 
Applicants must have unrestrict- 
ed authorization to work in the 
United States. Salary $90,461 
year. 40 hours/wk. Respond with 
two copies of resume to Case 
#200200827, Labor Exchange 
Office, 19 Staniford St., 1st F 


Boston, MA 02114 


mart Software Co. is look- 

g for programmer/system ana 
ysts. Qualified candidates must 
have minimum BS. Exp. using 
PowerBuilder 7.0 Data 
Architech 6.0, C Server 
Sybase (ASA8.0), MKS is plus 
Good salary with full benefits 
Please apply at jobs@kssc.com 


EOE 


Programmer or system analysts 
wanted by RS_ Systems 
Company ideal applicants 
should have BS with experi 
ence. Skills in following areas 
preferred: Coldfusion, Java 
JavaScript DreamWeaver 
HTML, VBScript. Send resume 
with wage request to 
jobs@rssystems.com 


Software Engineer with 


Bachelor's degree in Computer 
Science and two years experi 
ence in development using .NET 
framework, Peoplesoft 8.0, soft 
ware development life cycle 
inder CCM level 5, ISO 9002 
Internationa 
Computerware, In 7 Main 


Street, Marlborough, MA 01752 


rs experience o} 
Master's degree 
degree 


Mathen 


vare Engineer: Dsgn and 
dvip me s/ware appins 
using C SQL Svr, MUMPS 
& related tools: Install, admn- 
str & maintain netw sys 
Database admin; Remote 
cust support thro WAN; Dsgn 
& dvip CACHE Database 
Sys. Requires BS or eqvint in 
Comp Eng & 5 yrs exp in 
appin dvipmnt and/or sys 
admin and/or network eng 
and MCSE for Win 4.0. Apply 
Integrated Informatics, Inc 
1805 Old Alabama Rd, Ste 
320, Roswell, GA 30076 
Email: kaps@ii-i.com 


Consultant sought by NYC 


Computer Consulting firm 
to analyze user needs, to 
dsgn, dvip & impimt medi- 
um to large scale applics 
using technologies such as 
Lotus Notes/Domino, Lotus 
Script, C/C++, SQL & 
HTML. Must have BS in 
Comp Sci or Engg, Info 
Systems Engg or related 
w/2 yrs of relevant work 
exp. Send resume to 
Gemini Systems HR 
#CMG, 61 Broadway, Ste 
925, NY, NY 10006 


MphasiS-BFL Ltd. and its sub- 
sidiary MphasiS Corporation 
has multiple openings for the 
following positions at its office 
nm New York and unanticipated 
client sites throughout the 
U.S.: Programmer Anal 

Software Engineer, Project 
Manager, Management Ana- 
lyst, Sales Engineer, Business 
Development Manager, Fi- 
nance Manager. Please send 
esume and salary history to. 
hr@mphasis.com or mail to 
444 Park Avenue South, Suite 
#503, New York, NY 10016 


Computerworld + InfoWorld * Network World + April 28, 2003 
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Seeking qualified applicants for 
the following positions in 
Memphis/Collierville, TN: Sen: 
ior Programmer Analyst 
Formulate/define functional req 
uirements and documentation 
based on accepted user criteria 
Requirements: Bachelor's degr- 
ee* in computer science, MIS 
engineering or related field plus 
years of erience in sys 
ns/applications development 
Experience with ClearBasic pro. 
gramming alsc required 
“Master's degree in appropriate 
eld will offset 2 years of ge 
>rience omit resum 
George. 
1900 Sur Tower 
Suite 1400, Orlando, FL 


M 


COMPUTER SYSTEMS 
ENGINEER wanted by 
hardware & systems sup- 
port Co. in Houston, TX 
Must have B.S. in Comp 
Engineering (or Electronic 


& Comp. Engineering) 


plus exp. Respond by 
resume only to: Mr. S. Ye 
I1D-Melody Computers 
Inc. 5800 Ranchester, Ste 
160, Houston, TX 77036 


Programmer Analyst, Wilmingtor 
DE. Bachelors in Come 
Electronics or MIS + one 
n desigr 

jement net enab' 
tions utilizing Java, HTML, XML 
Java/RMI, CORBA, EJB, C 
SQL, and PL/SQL and do OOP 
using C++ and C # for Windows 
95/98/NT & Unix; design GUI 
using VB, Visual Age for Java and 
Developer 2000; design & devel 
op RDMBS using Oracle, SQL 
Server, MS Access, DB2 and 
generate reports using JDBC 
Forms 5.0, Reports 2.5. Respond 
to HR Dept, Neotech Solutions 
In 1170 Broadway, Suite 314 
New York, NY 10001 


network administra 
tor wanted by Printing Industries 
of Michigan Service Corp 
Duties include system & network 
administration, install & config 
ire servers, user support. Must 
have BS or equivalent with 
CCNA, MCP, MCSE. Please 
apply at nick@print.org. EOE 


Comp Consults is looking for 
programmer/system analysts 
engineers or IT consultants. Our 
minimum requirement is BS plus 
some experience in following 
area: Oracle, Unix, C/C++, VB 
Java J2EE EJB XML 
XSL/XSLT Please send 
resumes to immg@compcon- 
sults.com. EOE 


Exp'ed Prog/Sys Analysts, DBAs 
Syst Admins, S/W Engineers 
required for branch locations in 
Elgin, IL, Lower Gwynedd, PA and 
Cherry Hill, NJ. Skill sets C, C++ 
Wireless, HTML on UNIX 
Windows; VB, VC++, PB; Oracle. 
PL/SQL, Pro*C VLSI/ASIC de 
sign, VHDL, C, C++, Shell scripts: 
UNIX, Windows Sys. Admin; CO 
BOL, CICS, DB2. Require BS/MS 
5 any branch)/Math 
foreign 

in edu & exp.) 

el required 

salaries sumes to: HR 
Technologies, 585 Toligate 

Elgir 60123 


branch 


Innovision Technologies a 
dynamic company, is looking for 
system analysts, IT profession 
als and soft project engi 
neers plus some experi- 
ence is r e offer attrac 
tive wage with full benefits, 401k 
and is stable. Please send 
resumes tc 
iti@innovisiontech.com EOE 


Synergy has openings for IT 
professioné or engineers 
Qualified applicants must have 
BS/MS with some experience 
Strong background in TCP/IP 
Suite, Unix, DB2, Oracle, VB 
SQL, IIS, Window NT and XML 
is plus. Send resumes to 
hr@synergycom.com. Travel is 


required. EOE 


Programmer Analysts - Job 
Enta’ nd requires experience 
n design and development of 
applications BAAN, Triton 
SAP, Siebel, WinRunner and 
SEI-CMM. Software Engineers- 
Job entails and requires experi. 
ence in design and development 
9f applications using O le 
Applications (GL, OM, OE, PO 
and INV), Oracle, VB and Unix 
Job Location: Dublin, OH 
Relocation within USA Possible 
Attractive compensation pack- 
age. Send resume to Priya 
Venkat, Technology Software 
In 5708 Clearfield Lane 
Dublin, OH 43016. 


Thc) 
companies 


e-merging 
companies 


CTT dre 
companies 


e-normous 
opportunities 
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TD aGeNuetod eS 


Se 
NETWORKWORLD, 
COMPUTERWORLD, 
AND INFOWORLD 
HELP You Do 


A BETTER JOB. 


Now LeT US HELP 
You Get One. 


CALE: 
1-800-762-2977 


Male teres eeKey ea 
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Farmers Telephone Cooperative SAP CONSULTANTS Dev- Py nnac Talent nc., a premier I(T Business Objects has an opening 
has a Programmer Analyst Pro nsulting and Services the position of Regiona 
opening in Kingstree, SC. Duties elop & implem functional company, has immediate, full-time lutions Specialist to be based o 
include design,develop web- modules such as FI/CO eee 

based software applications MM, SD, PP. ABAP Progr. Software Engineers to research 


especially for wireless communi- pin fecbe fF 


cation industry: support, en- PROGR ANALYSTS & 


hance web-based software rin ind techr n ple- Ft A 8 afin 
2 R e 4 s tion at its West Lafayette home campus 
applications, systems analysis DESIGN ENGINEERS le r ig r softwe us 2003 hid s : i. af , . 
e tment's mission focuses p 


oly er Tatil med 
Computer Technology 


he Middleton, Wi area. C 

ze FORTRAN and Hi 
pertise to Support Western Region 
ware syste: Purdue University's Department of Computer Technology 


hardware nvites applications for a tenure-track, assistant profess )OSI- 


n teaching 


integration, coding, and testing 
Skills include Java, Serviets 
JSP, and RPGILE programming, 
BS in Computer Science 
Engineering or related field, 3 
years experience. Send resume 
to FTC, Human Resources 
Administrator, P.O. Box 588 
Kingstree, SC 29556 


Software Engineers to 
design, develop, imple- 
ment & maintain engineer- 
ing, business, accounting 
& management info appli- 
cations & systems. Bach 
in C.S., Physics or 
Engineering + 5 yr exp or 
Master in CS req. Send 
resume to Span Systems 
Corp., 230 Sherman Ave., 
#9, Berkeley Heights, NJ 
07922 


International Programming & 
Systems, Inc. has employment 
opportunities for Systems An- 
alysts with any of the following 
skills: COGEN; SAPIENS; TERA- 
DATA; VB. Developers exp. in 
STRATUS, UNIX; UNIX Systems 
Admin and Network admin 
Positions are available through 
out the US inc. Hamilton & W 
Trenton NJ, Philadelphia, PA 
Seattle, WA. IPS also has open 
ings for Sales and Recruiting staff 
in our San Francisco office. Elec- 
tronic responses are encouraged 
cflavell@ipsamerica.com or mail 
resume to IPS, 1875 So. Grant 
Street, #300, San Mateo, CA 
94402 (Fax) 650-572-8679 
Principals only please. 


Software Engineer to design 
develop, test, implement web 
based applications using 
VC++, COM, ISAPI, Java 
EJB, JSP, J2EE, MS SQL, C 
NSAPI, WAP on Linux and 
Windows platforms. Tasks 
include System Architecture 
and recommendation of 
Architecture and technology 
Masters degree in computer 
science and three years expe- 
rience. Send resume to 
Datum Software Inc, 6525 
The Corners Parkway, Suite 
312, Norcross, Georgia 
30092 


Software Dev. Comp. located in 
New Jersey & California req 
Software Engg. w/MS & 1 yr 
exp. or its equiv. & Prog. Analyst 
w/BS & 2 yrs. exp in foll 


JD Edwards, HP-9000, IBM 
AS/400, Oracle, DB2, Win NT 
SQL/400, Coboi/400, JDE World 
Case, VB, VC++, COM/DCOM 
Java HTML XML ASP 
JavaScript, SQL Server, UML 
Object Oriented, Distributed 
Networking Systems. 


Excel. Benefits, Apply with 
resume to Attn: Recruiter 
Systime Computer Corp. former- 
ly Compuware Solutions, Inc 
181 Metro Drive #500, San 
Jose, CA 95110. 


Design, develop, implem aly } tio work ar , 20 


data migration, testing of 
Bus Appin, PDM systems- 
Metaphase Windchill 
Enovia, Auto Components 
Skills such as C, C++, Java 
Oracle RDBMS SAP, 
Unix.CATIA,Pro Engineer. 
CAD/CAM req'd. ICAD & 
other KBE OO sys devel 
need CAD/CAM/CAE exp 


BS, MS or equiv in CS 
Mech, EE Bus Adm 
Finance or related field; & 
1-5 yrs exp in the req'd 
area 


Positions available in 
Detroit, MI & at client sites 
throughout US. Pls mail 
resume to HR, 33533 West 
12Mile Rd #131 
Farmington Hills, Ml 48331 


Software  Engineer-Systems 
Analysis & Programming 
Perform requirement analysis 
design, programming, testing 
and implementation of telecom- 
munications usage rating and 
invoicing system; develop and 
direct software systems to 
process loca! and long distance 
usage and products inciuding 
tating, taxing, promotion appli 
cation, reporting and revenue 
interfaces; provide 24x7 produc- 
tion support; implement monthly 
changes to comply with taxing 
rules and rates and International 
and National Terminating Point 
Master databases. Requires a 
bachelor’s degree in engineer: 
ing, computer science or man- 
agement information systems 
or will accept bachelor’s equiva- 
lent based on a combination of 
education and/or experience as 
determined by a professional 
education or experience evalua- 
tion service; also requires 2 
years experience in the job 
offered or 2 years experience in 
the design and development of 
telecommunications usage rat- 
ing and invoicing system. Salary 
range $68,000 to $74,000/yr; 40 
hrs/wk, 8AM to 5PM, Monday to 
Friday. To apply, submit two (2) 
copies of your resume to: Case 
#200200773, Labor Exchange 
Office, 19 Staniford St., 1st Fir 
Boston, MA 02114. EOE 


Programmer/Analyst to design 
develop, test, implem 

tain and support web-based 
software in a client/server envi- 
ronment using JAVA,J2EE, JSP 
HTML, SERVLETS, EJB, JOBC 
SWING, CORBA, RMI, TCP/IP 
SOCKET, VISUAL BASIC, XML 
ASP C++ ORACLE 
WEBLOGIC WEBSPHERE 
NETSCAPE APPLICATION 
SERVER AND SERVICES ON 
UNIX, SUN SOLARIS AND 
WINDOWS Platforms. Require: 
BS Degree in Science, an 
Engineering discipline, or a 
closely related field with 2 years 
of progressively responsible 
experience in the Job offered or 
in the related occupation of 
Software Engineer. Extensive 
travel on assignments to various 
client sites within the US is 
required. Competitive Salary 
offered. Apply by resume to: 
Ravi Kandimalla, President 
Everest Computers, Inc. 900 
Old Roswell Lakes Parkway. 
Suite 300 Roswell GA 30076 
Atten: JobMY 


Systems Analyst t 


requirements 


Programmer Analysts 
deveic test. and documer 
puter p i knowl- 
g techniques 
ms: evaluate 
r new or modified 
9gram, formulate plan outlining 
teps requ levelop program 


analysis and 


neet 
a variety of software 
SAP/R/3, ABAP/4 
ns, PL Java 
MQ Series 


Websphere, Visual 
or, Oracle Data- 


or Embedded 


ns, we als 
relocation 
ential resumé 
and position 
applying for to: Pinnacle Talent, 
Inc. Attn: HR 1919, Midwest 
Road, Suite 210, Oakbrook IL 
60523 


Programmer/Analyst to analyze 
design, deve test, main- 
tain, implement and support web 
based application software ina 
clienUserver environment using 
Java, J2EE, EJB, JSP, Serviets. 
JDBC, JavaBeans, XML, XSLT 
WebLogic, Apache, PL/SQL 
SQLJ, Oracle, MS-SQL Server 
UML, Rational Rose operating 
under UNIX and Windows 
Platform. R e: BS Degrer 
Computer nce 
Engineering discipline a 
closely related field with 2 year 
of progressively responsible 
experie e Job offered or 
in the relz occupation of 
Software Extensive 
travel on nments to various 
client s within the US is 
required. Competitive salary 
offered. Apply by resume to 
Ravi Kandimalla, President 
EVEREST COMPUTERS INC 
900 Old Roswe Lakes 
Parkway, Suite Roswell 
GA- 76: Attn: JobMP 


SOFTWARE ENGINEER to 
design, develop, enhance and 
maintain web-based application 
software ¢ electronic invoicing 
systems usi ASP.NET, Visual 
Basic, VB Script, Access, SQL 
Server and COBOL under 
Windows and UNIX operating 
systems. Re B.S. degree 
in Computer Science/ Engin- 
eering, or a closely related fieid 
with five years of experience in 
the job offered or as a Systerns 
Analyst. Competitive salary 
offered. Send resume to 
Appsoft Technologies. Inc., 638 
Hillandale Circle, SW, Marietta 
GA 30064; Attn: Job VO 


year experience in jc 


Presales Eng 


alent means a 


professiona 


30 Orchard Pkwy, San J 


Hexaware Technologies. 
immediate, full-time 
for: 


Software Engineers, 1 
design and develop comp 
ware systems, in conju 


hardware pr velopment 


applying principles and techniques 


of computer science, engineering 


and mathem analysis, formu- 


late and des: 


Syba' 
Master's 


required 
Systems Analyst to analyz 


or to 

system: review 

apabilities st 

tion processing systems 

new systems to improve fF 

vill use a variety 

ncluding:; Apache, Java 
Oracle, PL/SQL, Serviets, Rational 
Rose. Master's degree 

edu. equiv. of same and 


required 


Programmer Analysts t 
develop, test and docum 
puter programs, apply o 
edge of programming techniques 
and nputer systems: evaluate 
user est for new modified 
program, formulate plan outlining 
steps required to develop program 
using structu nalysis and 
design. Design new code/program 
or replace, delete, or modify exist- 
ng CO p ram to meet client 
needs, will u variety of software 
tools includ 

Visual Basic 

elor's degree or foreig: 

of same and tyr exp 


For some positions, we will aiso 
accept the degree equivalent in 
edu. and exp. Travel and/or reloca- 
tion required. Send confidentia 
resume, salary requirements and 
position applying for to: Hexaware 
Technologies, Inc. Attn: HR. 4343 
Commerce Court, Suite 618, Lisle 
IL 60532 


Computerworld + April 28, 2003 


educational and applied res 


outreach. T osition is focused 


stra’ atabase programming 


applications. The ct andid. 


undergraduate and 
dates must have 
and at least three years of ind 
didates will have knowledge 
and knowledge 


and temporal database Jata 


yraduate educat 


fession 


on areas 


and 


earned Masters D 


and academ 


Computer Techno 


Lafayette 


SOFTWARE APPLICATION 
ENGINEER 


2 years o 
offered 
Head-Biomedic 
Engineer, 2 years 
ence on medica 
and familiarity 

s like Pasca 
Salary 0 
na. Must have 
authority to work 

s. Send your resume 
lowa Workforce Center. 5 
Watson Powell Jr. Way, Suite 100 
Des Moines, lowa 50309-1727 
Please refer to Job Order 
1A1101718. Empioyer paid adver- 
tisement 


Senior Software Engineer 


>pen 
f areas, at ai 
software de 
business software 
rogrammer/analyst 
software 
eer, business 
Z software engi 
eer, technica sultant, web 
eveloper, database administra 
echnical specialist, techni- 
applica- 


other IT 


Texas, New Jersey 
Charlotte, N.C., etc 
visit our website for a complete 


available job openings 


locations and other information 
www.jdedwards.com J.D 
Edwards is an equal opportunity 
employer 
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Software Engineer-Systems 
Analysis & Programming 
Perform requirement analysis 
design, programming, testing 
and implementation of telecom- 
munications usage rating and 
invoicing system; develop and 
direct software systems to 
process local and long distance 
usage and products including 
rating, taxing, promotion appli- 
cation, reporting and revenue 
nterfaces; provide 24x7 produc 
tion support; implement monthly 
changes to comply with taxing 
rules and rates and international 
and National Terminating Point 
Master databases. Requires a 
bachelor's degree in engineer 
ing, Computer science or man- 
agement information systems. 
or will accept bachelor’s equiva- 
lent based on a combination of 
education and/or experience as 
determined by a professiona 
ation or experience evaiua- 

tion service; also requires 
years experience in the job 

red or 2 years experience in 
he design and development of 
telecommunications usage rat- 
ing and invoicing system. Salary 
range $68,000 to $74,000/yr; 40 
hrs/wk, 8AM to 5PM, Monday to 
Friday. To apply, submit two (2) 
copies of your resume to: Case 
#200200771, Labor Exchange 
Office, 19 Staniford St., 1st Fir 
Boston. MA 02114. EOE 


Software Quality Assurance Ana- 
ftware Quality 
urance, Software Development 

z Software Testing. Achieve 
oftware Engineering Institute's 
CMM levei Ii and Ill. Assist in 
software configuration 

ocess (SCM) for simplicity and 
standardization. Generate finan- 
cial projections and perform finan- 


yst to perform 


al analysis. Perform work on 
Process and CM modeling tools 
and customize them to project 
requirements. Utilize VB, C, C++ 
Web Development Skills. SCM 
Tools/Techniques and Process 
Modeling Tools/Techniques such 
as PVCS tracker, Version Mana- 
ERWin, MS Project 
rs Degree in Information 
and two years experi- 
Send resume to Triton 
information Technologies Inc., 501 
Silverside Road, Suite 139 
Wilmington, DE 19809 


SOFTWARE ENGINEER to 
design, develop, enhance and 
test web-based application soft- 
ware using Java, JSP, JMS 
EJB, Serviets, JDBC, Java 
Beans, Java Swing, XML 
Oracle, Rational Rose and BEA 
Weblogic under UNIX and 
Windows NT operating sys 
terns. Require: B.S. degree in 
Computer Science an 
Engineering discipline, or a 
closely related field with four 
years of experience in the job 
offered. Extensive travel on 
assignment to various client 
sites within the U.S. is required 
Competitive salary offered 
Apply by resume to: Kevin 
Barfield, Total System Services. 
Inc., 1990 Barrett Summit, Suite 
200, Vaughn Rd., Kennesaw 
GA 30144; Attn: Job LB 


PROGRAMMER ANALYSTS 
req'd for Hickory Hills, IL office. 
Design & develop software appli- 
cations using Developer 2000 
Designer 2000, VB, Oracle 
Cobol, C++ & Erwin; Develop & 
implement client/ server applica- 
tions in oracle financials using 
synchronization techniques such 
as PL/SQL, Developer 2000 & 
Designer 2000; Perform system 
& integration testing. Bachelors 
req'd in Computers, Engineering 
math or any related field of study 
+2 yrs of related exp. 40 hrs/wk. 
Must have legal authority to work 
permanently in the U.S. Send 
resume to HR Manager, Compro 
Consulting Group,Inc., 8619 W 
95th St., Hickory Hills. IL 60457 


Software Engineer-Systems 
Analysis & Programming 
Perform requirement analysis 
design, programming, testing 
and implementation of telecom- 
munications usage rating and 
invoicing system; develop and 
direct software systems to 
process local and long distance 
usage and products including 
rating, taxing, promotion appli- 
cation, reporting and revenue 
interfaces; provide 24x7 produc 
tion support; implement monthly 
changes to comply with taxing 
rules and rates and International 
and National Terminating Point 
Master databases. Requires a 
bachelor's degree in engineer- 
ing, computer science or man- 
agement information systems 
or will accept bachelor's equiva- 
lent based on a combination of 
education and/or experience as 
determined by a professional 
education or experience evalua- 
tion service; also requires 2 
years experience in the job 
offered or 2 years experience in 
the design and development of 
telecommunications usage rat- 
ing and invoicing system. Salary 
range $68,000 to $74,000/yr; 40 
hrs/wk, 8AM to 5PM, Monday to 
Friday. To apply, submit two (2) 
copies of your resume to: Case 
#200200772, Labor Exchange 
Office, 19 Staniford St., 1st Fir 

Boston, MA 02114. EOE 


Sr.Programmer/Analyst to 
Analyze, design, develop, test 
maintain, implement and sup- 
port web-based and client/serv- 
er applications using Oracle 
Oracle forms, Oracle reports in 
Unix and Windows Platforms 
Require: BS Degree in Science 
Business Administration or 
Engineering or a closely related 
field with 5 years of progres- 
sively responsible experience in 
the Job offered or in the related 
occupation of Software Engineer 
or System Analyst. Extensive 
travel on assignments to various: 
client sites within the US is 
required. Competitive Salary 
offered. Apply by resume to 

Ravi Kandimalla, President 
EVEREST COMPUTERS INC 

900 Old Roswell Lakes 
Parkway, Suite 300, Roswell 
GA-30076: Attn: JobJP 


PROGRAMMERYANALYST to ana- 
lyze, design, develop, test, imple- 
ment and maintain client/server 
and v ased application soft- 
ware for the insurance industry 
using Java, C++ UML, JSP, 
Serviets, iPlanet Server, SQL 
Server, SQL and Oracle under 
Windows 98/2000/NT/XP, Novell 
UNIX and SUN Solaris operating 
systems. Require: B.S. degree in 
Computer/Systems Science, an 
Engineering discipline, or a closely 
related field with two years of expe- 
rience in the job offered; A M.S. 
with a demonstrated ability to per- 
form the ted duties gained 
through ai 
vious work experience will be 
accepted in lieu of the B.S. and two. 
years of experience. Competitive 
salary offered. Send resume to 
Infinity Insurance Company, P.O 
Box 444, Birmingham, AL 35209: 
Fax at 205-803-8406; or E-mail at 
Jobs@iInfinity-Insurance.com; Attn 
Job MK 


jlemic coursework/pre- 


Sales Engineers needed 
Seeking qual. cand. pos- 
sessing MS/BS or equiv. 
and/or relevant work exp 
Duties include: analyze 
product value propositions 
demonstrate products and 
create solutions for clients 
2 yrs. marketing experi- 
ence required. Must be 
willing to travel and relo- 
cate. Mail resume & ref. to 
Zycus, Inc., 3375 Scott 
Bivd., Santa Clara, CA 
95054, ATTN: HR 


|B Oy Vi ahaa: 


Senior Technical Consultant 
Responsible for working with 
customers and Systems 
Integration partners. Lead busi- 
ness scope and design work- 
shops, develop, test and deploy 
billing solutions using 
MetraTech's methodology and 
products. Responsible _ for 
obtaining and analyzing product 
and integration requirements 
business object functionality 
and integration with provisioning 
and customer care systems 
Will outline and communicate 
business and technical solutions 
for the customer. Work with 
MetraTech's engineering and 
marketing teams to propose 
specific partnership initiatives as 
well as product enhancements 
Requires: Bachelors in Com- 
puter Science and Engineering 
and 4 years experience in 
Software Engineering/ Develop- 
ment Must have hands on 
knowledge of VC++, MFC 
Visual Objects and Crystal 
Reports. 40hrs/wk (8:00 a.m. to 
5:00 p.m.); $90,064.00/yr. Send 
two resumes/responses to 
Case Number 200116126 
Labor Exchange Office, 19 
Staniford Street, 1st Floor 
Boston, MA 02114 


Programmer/Analyst: Analyze 
design, develop, test, implement 
and maintain customized soft- 
ware applications in a client/serv- 
er or mainframe environment 
Will also provide in-depth trouble 
shooting and problem solving as 
well as analysis, design, develop- 
ment and implementation assis- 
tance to AS/400 programmers 
system administrators, operators 
and end users. Must have 2 yrs 
exp. in job offered or 2 yrs exp. in 
software development. Such 
experience must include AS400 
and related tools. Must be willing 
to be assigned to unanticipated 
client sites throughout the United 
States. Salary: $75,000/yr. Hrs. 
8:00am-5:00pm, 40/wk. Please 
send 2 copies of resume to: Case 
#200201344, Labor Exchange 
Office, 19 Staniford St., 1st Fl 
Boston, MA 02114 


SYSTEMS ENGINEER 


Specify, design, code, test and 
maintain systems software used 
by company application in the 
UNIX environments of Sun Solaris 
IBM AIX. Track UNIX technology 
directions and ensure that compa- 
ny products are tailored appropri- 
ately for the UNIX environment 
Knowledge of UNIX system ser 
vices: threads, daemon processes 
signals, client-server architecture. 
40 hours per week. $65,000/year 
Master's degree in Computer 
Science related field. Must have 
proof of legal authority to work in 
the United States. Send your 
resume to: Madhavi Bhadbhade. 
Nebraska Workforce Develop- 
ment, Department of Labor, P.O. 
Box 94600, Lincoin, NE 68509- 
4600. Please refer to Job Order 
#SBAH5-LFME3-17441 


The Whitaker Companies has an 
opening in the Houston Metro area 
for a Senior SAP/Technical Con- 

ant: Provide Techno-functional 
solutions in SAP. Develop proto- 
type solutions. Perform Functional 
Configuration, programming in 
ABAP?/4, Testing, Transportation to 
Production utilizing Insite or 
Revtrac software in various Asset 
Management, Human Resources 
Time Management and Cross-func- 
tional by utilizing reiated software 
Peregrine, MS-Office. Bachelors 
degree in Business, Information 
Systems or related field plus 3 
years in job offered or 3 years as 
Programmer/System Analyst in- 
volved in developing Prototypes 
customizing Fl and _ Interfaces. 
Reports in ABAP/4 and related 
duties. Send resume to: Whitaker 
Consulting 1200 Enclave Parkway 
Suite 200 Houston TX 77077 
www.whitakerconsulting.com 
paul.choudhuri@whitakerconsult 
ing.com 


Lead Analyst (Boston & Waltham 
MA) - Provide tech support & admin 
for UNIX servers. Manage Solaris 
& AIX administration of SUN & IBM 
servers. Work w/ sys development 
personnel to implement client serv- 
er based apps. Diagnose & resolve 
complex sys problems; install, up- 
grade, & configure UNIX, Solaris, & 
A3IX servers; create & modify 
users & groups on server; imple 
ment fault tolerance through utiliza- 
tion of VXVM in Solaris & Volume 
Mgmt in AIX; implement sys securi- 
ty measures. Aid in maintaining 
corporate standards, policies, & 
procedures for UNIX environment 
Apply knowledge of Sun Solaris 
UNIX administration, Veritas Vol- 
ume Mgr, DNS, TCP/IP, C/C++, & 
shell script programming. Support 
database servers such as Sybase. 
Oracle, & Informix. Be on-call at all 
times to respond to critical prob- 
lems. Min. req's: Master's in Comp. 
Sci, Elec. Eng’g, or rel. field, or 
equiv, no exp req'd. Alternately, will 
accept Bachelor's in Comp. Sci 

Eng’g, or rel. field + 5 yrs pro- 

ively responsible exp in data- 

administration & program- 
ming. Must have unrestricted auth- 
orization to work in U.S. M-F, 8AM. 
5PM, 40 hrs/wk. Salary: $85K/yr 
An EOE. Send 2 copies of resume 
to Case No. 200200729, Labor 
Exchange Office, 19 Staniford St 
18t FI, Boston, MA 02114 


IT Specialist (Software Engineer) - 
Render consulting services and 
provide support and guidance to 
Web application development and 
deployment teams at various client 
sites throughout the U.S. Develop 

ment and test web applica- 
tion products utilizing Java, Java 
Script, J2EE, EJB and Serviet 
based on analysis of user require- 
ments. Must have Bachelor's de- 
gree or equivalent in Computer 
Science or Electrical Engineering 
as well as either two years of expe- 
rience in the job offered or two 
years of experience as a Systems 
Engineer. 40 hrs./wk., 8:00 A.M. to 
5:00 P.M., $95,000.00 p.a. Job 
Order Number WEB 318500 
Applicants should send resume to 
the following address and must ref- 
erence the job order number: Site 
Director Pittsburgh/Allegheny 
County CareerLink, ATTN: ES 
Supervisor, 425 Sixth Avenue 
Suite 2200, Pittsburgh, PA 15219. 


BSystems Inc. has several 
openings in S. Dakota, WA & 
elsewhere for Programmer 
Analysts, Systems Analysts 
Software Engineers & DBAs 
wiat least 2 yrs exp in any of the 
foll ESSCMD Hyperion 
Essbase, Hyperion Analyzer. 
Planning, Planet, Tomcat, Sun 
Solaris, PL/SQL, VB, Application 
Builder, ARCGIS, ARCView 
ARCFM, VisualGen 2.2/3.1 
CSP, MVS, COBOL, BiueMartini 
w/J2EE technologies, HP3000 
MPE/X, Win NT. Some pos req 
bach others masters. Equiv deg 
&/or exp also accepted. Exc 
pay & benefits. Please indicate 
pos applying for. Possible relo- 
cation reqd. Mail resume to: HR 
Dept., 300 N. Dakota Ave, Ste 
503-B, Sioux Falls, SD 57104 


SOFTWARE ENGINEER to 
design, develop, maintain and 
support web-based application 
software in a client/server envi 
ronment using C++, J2EE, BEA 
Weblogic Application Server, 
OOAD, SSAD, OOPS, Rational 
Rose, Perl, JavaScript, Oracle 
and DB2 on UNIX, SUN Solaris 
and Windows platforms 
Require: M.S. degree in 
Computer Science, an Engin- 
eering discipline, or a closely 
related field with two years of 
experience in the job offered 
Extensive travel on assignment 
to various client sites within the 
U.S. is required. Competitive 
salary offered. Apply by resume 
to: Ravi Kandimalla, President, 
Everest Computers inc., 900 
Old Roswell Lakes Parkway, 
Suite 300, Roswell, GA 30076 
Attn: Job VP 
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Various 
Openings 


We have openings for 
Design Specialist, Game 
Designer, Producer, 
Software Engineer and 
Programmer/Analyst 
Los Angeles areas. Send 
resumes to 3100 Ocean 
Park Blvd Santa 
fonica, CA 90405 
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Continued from page 1 
Health Net 


nology that will be used to 
support the network. 

The eHealth network will 
capture patient data collected 
by hospitals — especially in 
emergency rooms — and auto- 
matically distribute informa- 
tion to health agencies. The 
project was in the works prior 
to the recent outbreak of 
SARS, or severe acute respira- 
tory syndrome, and the net- 
work isn’t being developed 
specifically to gather SARS- 
related data. 

But Dr. Russell Ricci, gener- 
al manager of IBM’s global 
health care division, said auto- 
mated syndromic surveillance 
technology that can collect in- 


Continued from page | 
Strike Threat _ 


the deal with HP was an- 
nounced, the IBOA served 
Bank of Ireland with two 
weeks’ notice of possible 
dustrial action,” which in- 
cludes the threat of an all-out 
strike. That followed a vote in 
which 83% of the union mem- 
bers who took part sided with 
the plan to send the notice to 
the bank, according to a post- 
ing on the IBOA’s Web site. 

Calls to IBOA general secre- 
tary Larry Broderick weren't 
returned by press time, and it 
wasn’t clear how many bank 
employees actually participat- 
ed in the vote. But on the 
union’s Web site, Broderick is 
quoted as saying that the vote 
“testifies to the huge concern 
and uncertainty” about the 
proposed outsourcing deal 
among IT staffers at Bank of 
Ireland. 

The IBOA’s top priority is to 
prevent the bank from pro- 
ceeding with the outsourcing 
arrangement until there are 
“full negotiations and agree- 
ment” with the union, Broder- 
ick said. Otherwise, IT work- 


in- 


Periodical postage paic 
weekly: except a single c e jor the last tw 
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formation about symptoms 
like the high fever and respira- 
tory problems that are com- 
mon with SARS will be a key 


| component of the three- 


month test. 

In addition to emergency 
room data, syndromic surveil- 
lance systems can gather in- 
formation about sales of over- 
the-counter medicines, Ricci 
said. However, that capability 
won't be part of the network 
test, he added. 

The pilot project will dem- 


| onstrate how to apply sophis- 
ticated data mining techniques | 


to the health care industry and 
how to tie together stovepiped 
hospital information systems 

using commercial middleware 


| tools, Ricci said. 


The test version of the net- 
work will support electronic 


HOW TO 


Outsourcing Plans 
To IT Workers 


= Be as open as possible 
about the plans. The more se- 
crecy there is, the more negative 
the employee reaction will be. 


= Make sure middle and lower- 
level managers are equipped 
to handle the questions IT staff- 
ers are likely to have. 


See eo STE SSS ESEH ED EEES EEE OOS 


& Develop programs, such 
as those for training workers in 
new IT skills, that can help to 
mitigate the threat of employee 
backlash. 


RIN AMFOR NN 


ers at the bank “will not be co- 
operating with any proposal to 
” he warned. 

Anne Mathews, a spokes- 
woman for Bank of Ireland, 
said bank officials “couldn't 
have meaningful discussions” 


with the IBOA until a preferred | 


outsourcing vendor had been 
chosen. Mathews added that 
the contract negotiations with 
HP are expected to take four to 
six months to complete. The 


union will have a voice in those | 


n, Mass... and other mailing 


NEWS 


Maybe eHealth 
| can... dem- 
_ onstrate that it is 
| possible [to build 
_ such a network]. 


| DR. SETH FOLDY, HEALTH 
COMMISSIONER, CITY OF MILWAUKEE 


| data exchange standards that 

| were mandated by the Depart- 

| ment of Health and Human 

| Services in March, Marchibro- 

da said. She added that eHealth 

officials hope that the pilot 

project will lead to the devel- 

| opment of a full network, but 

| that will depend on additional 

| funding. EHealth is building 
the test network in a partner- 
ship with the New York-based 

| Markle Foundation. 


discussions, she said, declining 
to comment about what tran- 

| spired during last week’s talks 
| with the IBOA. 


| Growing Unrest 
In an April 18 research note 

| about the strike threat, Gart- 
ner Inc. analyst Diane Morello 
wrote that she expects to see 

| more actions by IT workers to 
protest “what they perceive as 
unsettled employment situa- 
tions” as a result of job cuts 

| and an increase in the amount 

| of IT work being outsourced, 

| sent offshore or farmed out 
to contract and temporary 
workers. 

| Morello said IT managers 

| need to anticipate potential 

| worker backlash against out- 

| sourcing deals, even if their IT 
departments aren’t unionized. 

| Companies that don’t do so 

| risk work slowdowns or other 

| productivity drags, she said. 
“The important thing is to 

| communicate honestly and 

respect your employees,” 

| Morello added (see box). 

That’s precisely what Daim- 

| lerChrysler AG executives did 

| before the automaker last year 

| began outsourcing mainte- 

nance of about 150 applica- 


t «40063800 


Ricci said he couldn’t quan- 
tify the cost of implementing a 
| full nationwide network. “I 

would not even know where 

to put the decimal point,” he 

said, adding that federal back- 

ing would likely be needed. 
Dr. Seth Foldy, health com- 

missioner for the city of Mil- 

waukee, said he hopes that 

eHealth’s efforts will lead to 

the eventual development of a 
| system that would make it eas- 

ier to exchange syndromic 

surveillance data. “This is not 
going to be easy, but maybe 
| eHealth can build a business 
| case and demonstrate that it is 
| possible,” Foldy said. 
| He noted that the surveil- 
lance data can alert doctors 
| and public health officials to 
| potential outbreaks of epi- 


demics like SARS more quickly | 


tions that support its engi- 
neering, sales and manufactur- 
ing operations to offshore ser- 
| vices firms Infosys Technolo- 
gies Ltd. and Syntel Inc., both 

| based in India. 

DaimlerChrysler held a se- 
ries of “town hall” and break- 
fast meetings at its facility in 
Auburn Hills, Mich., in an ef- 
fort to do “whatever it took to 
answer questions and con- 
cerns” about the outsourcing 
plan, said CIO Sue Unger. 

Unger said the meetings 
helped her and other IT man- 
agers convey to the 100 inter- 
nal staffers and on-site con- 
tractors who had maintained 
the applications being out- 
| sourced that they would be 
redeployed to work on more 
strategic efforts, such as Web 
services and portal software 
projects. 

The outsourcing program 
has been “very successful,” 
Unger said, adding that it has 
helped DaimlerChrysler cut 
| its IT costs and provided the 
affected workers “with a 
| brand-new career.” D 


| MORE THIS ISSUE 


For coverage of how offshore outsourcing 
is affecting U.S. workers, turn to page 39 
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than is possible with tradition- 
al, diagnosis-based systems, 
which often require lab tests 
that take days to complete. 


| Syndromic systems provide 


more immediate information 
about patterns of symptoms 


| among patients, Foldy said. D 


Software Helps 
City Officials 
Track Outbreaks 


Milwaukee's municipal govern- 
ment uses an emergency room 
management application that 
includes a Web-based syn- 
dromic surveillance system for 
spotting potential epidemics, 
said Dr. Seth Foldy, the city's 
health commissioner. 

The emergency room appli- 
cation was developed by the 
Frontlines of Medicine Project, 
a nationwide collaboration 
among doctors and medica! 

IT specialists that is marketed 
by Infinity HealthCare Inc.'s 
EMSystem division. Both the 
Frontlines project and EMSys- 
tem are based in :.-equon, Wis. 

Foldy said the Frontlines 
group added a SARS surveil- 
lance tool earlier this month. 
The SARS component consists 
of a Web-based form that 
emergency room personnel can 
download to record and track 
any SARS-type symptoms pa- 
tients are experiencing as well 
as any recent trips the patients 
have taken to China or other 
countries where SARS out- 
breaks have been documented. 

If a patient shows signs of 
the disease and has recently 
visited a known SARS zone, 
hospital workers are instructed 
to call Milwaukee's health de- 
partment immediately. Other- 
wise, hospitals upload symp- 
tom data to local health offi- 
cials at the end of each day. 

Foldy said he would like to 
see the data transfer automat- 
ed in order to free hospital 
clinicians from the need to fill 
out forms. 

- Bob Brewin 
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s Bad as It Gets 


IMES ARE TOUGH. Budgets are tight. Patience is short. 
We're faced with underfunded projects, understaffed 
operations and underappreciated challenges. The goal 


of getting IT right — 


making sure our technology 


works, and works for the benefit of the business — has 


never been tougher to accomplish. 


Fortunately, one thing is still easy: screwing up. 


What? You’ve forgotten how? Never fear! Just 
commit this list of a baker’s dozen tips to mem- 
ory — or clip it out and keep it handy — and 
you'll never be short of bad ideas again: 

Assume. Assume you know what users need. 
Assume you know what managers expect. As- 
sume you'll have no problems. Assume you'll 
catch up when the schedule slides. Assume no 
problems will show up in testing. Assume no 
one will mind all your assumptions. Why 
should they? 

Expect. Expect support from management. 
Expect perfection from vendors. Expect clear 
specifications from users. Expect flawless exe- 
cution from the IT staff. Hey, it could happen 
— so why not expect it? 

Overpromise. Paint an improbably beautiful 
picture of glitch-free hardware, bug-free soft- 
ware and friction-free networks. Set an early 
delivery date. Make the list of features long. 
Keep expectations high. What else will spur 
you to do your best work? 

Complicate. Avoid straightforward designs. 
Sneer at simple solutions. Encourage complex- 
ity. Who’s going to respect technology that 
anyone can understand? 

Alienate. Alienate the users who can explain 
to you what your systems need to do for them. 
Alienate the business managers whose budgets 
you'll spend. Alienate senior management, 
from whom all funding flows. What 
do you need anyone’s cooperation 
for anyway? 

Experiment. Users make the best 
guinea pigs. Production systems 
make the best testbeds. Untried 
technology offers its greatest re- 
wards in mission-critical applica- 
tions. When your original plans 
don’t work out and the deadline 
gets near, why not give something 
completely untested a shot? 

Deny. Deny responsibility. Deny 
promises you made. Deny failure. 
Deny the limits of your staff, your 
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nist, has covered !Tformore discontent. Why sweat that small 
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systems and your own abilities. Deny what’s 
obvious to everyone else. Who should they be- 
lieve — you, or their own lying eyes? 

Change. Variety is the spice of life, and every- 
one loves something new. Change what users 
see on their screens. Change their passwords. 
Change what gets blocked by your filtering 
software. Change your help desk hours. 
Change your procedures. Change the rules. 
What’s wrong with these fuddy-duddies — 
can’t they get out of their rut? 

Procrastinate. Delay that status meeting. Push 
back that code review. Put off those patches 
and upgrades and audits. Isn’t there always 
time to get things done at the last minute — 
and if there isn’t, can’t you just push back that 
last minute one more time? 

Withhold. Withhold information. Withhold 
cooperation. Withhold anything that would 
give users, business-side managers or execu- 
tives a better sense of what to expect, when to 
expect it and how useful it will be if it ever ar- 
rives. Who ever heard of winning at poker 
without keeping your cards close to your chest? 

Underestimate. Make low-ball guesses for cost. 
Predict a minimum of problems. Sketch out 
short development schedules. Everybody loves 
an optimist, so why plan for expenses and de- 
lays that might never materialize? 

Avenge. Take revenge for perceived slights 
and possible acts of sabotage. Re- 
turn real attacks and imagined af- 
fronts in kind. Pay back every case 
of stupidity, folly and ignorance, 
measure for measure. Why risk let- 
ting someone get away with it? 

Ignore. Ignore problems, warning 
signs, complaints and objections. 
Ignore suggestions, feedback and 
test results. Ignore the recommen- 
dations of management and users. 
Ignore rumors and rumblings of 


stuff? After all, you’ve got IT work 
to screw up. BD 





www.computerworld.com 


Don't Say Anything 


For months, IT pilot fish for a school district begs this 
clerk for the data to file the state-mandated school 
bus accident report. Her constant reply: “No rush - 
the state can wait.” Finally, as fish faces a big hard- 
ware rollout, he warns, “If we don't do it soon, | don't 
know when I'll have time to send it.” So when district 
gets in trouble for failing to file the reports, what does 
clerk tell her boss? “He said he doesn't know when 
he'll have time to send them.” 


Fiumpaterser: SHARK — Touch 


air This pilot fish's 
TANK Sonstation 
cae needs to run 
ona server to install — ; continuously for a few 
new software. Monday = weeks. It's on a UPS, but 
morning: “Company's | to make sure it remains 
accounting software : untouched during a 
is spitting out errors ; Scheduled weekend 
right and left, and all = © power outage, he leaves 
users who have rebooted : a note: “Please do not 
their computers can no _ tum off under any cir- 
longer access the serv- © cumstances unless you 
er,” says a support pilot : speak with us first.” On 
fish. “Turns out he unin- : Monday, the machine 
Stalled all the licensing ; has been rebooted. “I 
deleted some critical ac- : sure | did not turn it off,” 
up process to fail. The _: under the desk and un- 
accounting department ; plugged it instead.” 
had to rekey over 2,000 : 
: Don't Slam 


transactions.” 

: The Door 
Don't Resuscitate Circa 1980, this New 
This hospital's aging, = York bank’s PDP-11/40 
er is finally replaced- = moved across town. 
but users demand that: “The techs put this pret- 
the old server be kept —_: ty large system ~ about 
running too. “They say _: the size of a VW minibus 
they're still using the old : - back together in 
server daily,” says pilot: record time, a couple of 
fish. But after several: days,” pilot fish says. 
months, the IT shop i “They finished their di- 
doesn't buy it. “We un- ; agnostic, closed one 
hook the network con- : remaining cabinet door - 
nection from the back, : and sliced through a 
leaving it stuck in i misrouted cable, which 
enough to look like it’s shorted and burned out 
connected,” fish says. : almost every system in 
“That was months ago. ; the PDP-11. it took two 
Guess who hasn't said : weeks to repair all the 
anything about it yet?” | damage.” 


oy FED THE Hane yr ec Teo 
sharky@computerworld.com. You snag a snazzy 
Shark shirt if we use it. And check out the daily feed, browse 
the Sharkives and and sign up for Shark Tank home delivery 
at k 
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Build a scalable 
data warehouse 
with a single 
point of control. 


SAS’ is all you need to know. 


Only SAS provides a high-impact, low-risk way 
to achieve intelligent data warehousing. You can 
extract, transform and load data from any source, 
across any platform, while assuring quality. 
Simplify the way you create and customize reports. 
And deliver a shared version of the truth. To find out 
how top companies reap bottom-line rewards with 
SAS software—by leveraging the value of data 
from corporate systems, e-business channels, the 
supply chain and beyond—visit us on the Web or call 


toll free 1 866 270 5727. 


www.sas.com/warehouse 


The Power to Know, | ‘ySas. 


SAS and ali other SAS Institute Inc. product or service names are registered trademarks or trademarks of SAS Institute Inc. in the USA and other countries. ® indicates USA registration. © 2002 SAS institute Inc. Ali rights reserved. 212324US.1102 





SUN FIRE” V1280 


Enterprise-class features and 
aggressive price points, so you 
can lower the cost of reliability. 


WHY NOT GUT COSTS 
WITHOUT CUTTING CORNERS? 


It’s simple, really: When you buy commodity hardware, you get 
Pen commodity features. So why not get premium features for the 
same price? With a line of servers that are as affordable as 


SUN FIRE V480 
a they are powerful, Sun is out to prove once again that you can 


ee lower costs and complexity without compromising quality. 


SUN STOREDGE™ 3510 Sun has an entire family of servers built to deliver enterprise- 


=e: level performance and reliability at highly competitive prices. 
Which means that for the cost of an alarmingly mediocre Wintel 
SUN FIRE V880 box, you can get an ultra-reliable Sun server ready to take on your 
most mission-critical tasks. From CRM applications to e-mail 
and Web serving. With this kind of bang for the buck, it’s no wonder 


Sun has remained the UNIX® server leader every year since 1998* 


To find out more about how Sun servers can deliver ~ Sun 


state-of-the-art technology at state-of-the-economy prices, 
visit SUN.COM/WHYNOT 


microsystems 
We make the net work. 
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